Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:46349
HistoryApr 10, 2024 - 9:52 p.m.

Arbitrary Code Execution

2024-04-1021:52:28
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
vulnerability
firefox
thunderbird
arbitrary code execution
windows error reporter
sandbox

6.7 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.5%

Firefox, Firefox ESR, Thunderbird are vulnerable to an Arbitrary Code Execution vulnerability. The vulnerability is due to leveraging the Windows Error Reporter to run arbitrary code, escaping the sandbox.

6.7 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.5%