Return-Oriented Programming(ROP)

🗓️ 25 Mar 2024 01:33:08Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 27 Views

Vulnerability in thunderbird and firefox-esr due to Return-Oriented Programming

Reporter	Title	Published	Views	Family All 217
AlpineLinux	CVE-2024-2607	19 Mar 202412:02	–	alpinelinux
AlmaLinux	Critical: firefox security update	25 Mar 202400:00	–	almalinux
AlmaLinux	Critical: firefox security update	25 Mar 202400:00	–	almalinux
AlmaLinux	Moderate: thunderbird security update	25 Mar 202400:00	–	almalinux
AlmaLinux	Moderate: thunderbird security update	25 Mar 202400:00	–	almalinux
AstraLinux	Astra Linux - уязвимость в firefox, thunderbird	20 May 202605:53	–	astralinux
Tenable Nessus	CentOS 8 : firefox (CESA-2024:1484)	8 Apr 202400:00	–	nessus
Tenable Nessus	CentOS 8 : thunderbird (CESA-2024:1494)	8 Apr 202400:00	–	nessus
Tenable Nessus	CentOS 7 : firefox (RHSA-2024:1486)	25 Mar 202400:00	–	nessus
Tenable Nessus	CentOS 7 : thunderbird (RHSA-2024:1498)	25 Mar 202400:00	–	nessus

Vulners

Node

mozilla thunderbirdMatch1:78.5.0-1debian

AND

debian debian_linuxMatch999

firefox-esr firefox-esrMatch78.5.0esr-1debian

AND

firefox-esr firefox-esrMatch78.8.0esr-1debian

AND

debian debian_linuxMatch999

mozilla firefoxMatch81.0-2debian

AND

mozilla firefoxMatch83.0-1debian

AND

mozilla firefoxMatch82.0.3-1debian

AND

debian debian_linuxMatch999

firefox-esr firefox-esrMatch78.5.0esr-1debian

AND

debian debian_linuxMatch11

mozilla thunderbirdMatch1:60.9.0-1~deb10u1debian

AND

mozilla thunderbirdMatch1:78.5.0-1~deb10u1debian

AND

mozilla thunderbirdMatch1:78.6.0-1~deb10u1debian

AND

mozilla thunderbirdMatch1:68.12.0-1~deb10u1debian

AND

debian debian_linuxMatch10

mozilla thunderbirdMatch1:78.5.0-1debian

AND

debian debian_linuxMatch11

firefox-esr firefox-esrMatch78.7.0esr-1~deb10u1debian

AND

firefox-esr firefox-esrMatch68.12.0esr-1~deb10u1debian

AND

firefox-esr firefox-esrMatch78.11.0esr-1~deb10u1debian

AND

firefox-esr firefox-esrMatch78.8.0esr-1~deb10u1debian

AND

firefox-esr firefox-esrMatch78.5.0esr-1~deb10u1debian

AND

debian debian_linuxMatch10

firefox-esr firefox-esrMatch102.11.0-r1os

AND

firefox-esr firefox-esrMatch115.0-r0os

AND

firefox-esr firefox-esrMatch102.10.0-r2os

AND

firefox-esr firefox-esrMatch102.11.0-r0os

AND

firefox-esr firefox-esrMatch115.0.3-r0os

AND

firefox-esr firefox-esrMatch115.5.0-r0os

AND

firefox-esr firefox-esrMatch102.10.0-r5os

AND

firefox-esr firefox-esrMatch115.1.0-r0os

AND

firefox-esr firefox-esrMatch115.0.2-r0os

AND

firefox-esr firefox-esrMatch102.12.0-r0os

AND

firefox-esr firefox-esrMatch115.3.1-r0os

AND

firefox-esr firefox-esrMatch115.7.0-r0os

AND

firefox-esr firefox-esrMatch115.8.0-r0os

AND

alpinelinux alpine_linuxMatch3.18

firefox-esr firefox-esrMatch115.4.0-r1os

AND

firefox-esr firefox-esrMatch115.5.0-r0os

AND

firefox-esr firefox-esrMatch115.8.0-r0os

AND

firefox-esr firefox-esrMatch115.7.0-r0os

AND

alpinelinux alpine_linuxMatch3.19

Source	Link
security-tracker	www.security-tracker.debian.org/tracker/CVE-2024-2607
bugzilla	www.bugzilla.mozilla.org/show_bug.cgi
lists	www.lists.debian.org/debian-lts-announce/2024/03/msg00022.html
lists	www.lists.debian.org/debian-lts-announce/2024/03/msg00028.html
mozilla	www.mozilla.org/security/advisories/mfsa2024-12/
mozilla	www.mozilla.org/security/advisories/mfsa2024-13/
mozilla	www.mozilla.org/security/advisories/mfsa2024-14/

01 Apr 2025 18:53Current

7.5High risk

Vulners AI Score7.5

CVSS 3.18.1

EPSS0.01672

SSVC