Lucene search
Veracode Vulnerability DatabaseVERACODE:46529HistoryApr 19, 2024 - 1:20 a.m.
Use-After-Free
2024-04-1901:20:50
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
4
firefox
thunderbird
use-after-free
vulnerability
incorrect reference counting
alignedbuffer
Firefox and Thunderbird are vulnerable to a use-after-free vulnerability. The vulnerability is due to incorrect reference counting, where assigning an AlignedBuffer to itself can lead to an incorrect reference count and subsequent use-after-free.
References
bugzilla.mozilla.org/show_bug.cgi?id=1883158
lists.debian.org/debian-lts-announce/2024/04/msg00012.html
lists.debian.org/debian-lts-announce/2024/04/msg00013.html
security-tracker.debian.org/tracker/CVE-2024-3861
www.mozilla.org/security/advisories/mfsa2024-18/
www.mozilla.org/security/advisories/mfsa2024-19/
www.mozilla.org/security/advisories/mfsa2024-20/
Related
redhatcve
redhatcve
CVE-2024-3861
2024-04-18 10:00:18
vulnrichment
vulnrichment
CVE-2024-3861
2024-04-16 15:14:08
debiancve
debiancve
CVE-2024-3861
2024-04-16 16:15:08
cgr
cgr
CVE-2024-3861 vulnerabilities
2024-05-19 03:07:16
ubuntucve
ubuntucve
CVE-2024-3861
2024-04-16 00:00:00
cvelist
cvelist
CVE-2024-3861
2024-04-16 15:14:08
nvd
nvd
CVE-2024-3861
2024-04-16 16:15:08
cve
cve
CVE-2024-3861
2024-04-16 16:15:08
nessus
nessus
Amazon Linux 2 : firefox (ALASFIREFOX-2024-024)
2024-04-30 00:00:00
Oracle Linux 8 : firefox (ELSA-2024-1912)
2024-04-20 00:00:00
Rocky Linux 8 : firefox (RLSA-2024:1912)
2024-05-06 00:00:00
rocky
rocky
firefox security update
2024-05-06 13:04:21
firefox security update
2024-05-10 14:32:42
oraclelinux
oraclelinux
firefox security update
2024-04-19 00:00:00
firefox security update
2024-04-19 00:00:00
firefox security update
2024-04-18 00:00:00
osv
osv
Important: firefox security update
2024-04-18 00:00:00
Important: firefox security update
2024-05-06 13:04:21
Important: firefox security update
2024-05-10 14:32:42
almalinux
almalinux
Important: firefox security update
2024-04-18 00:00:00
Important: firefox security update
2024-04-18 00:00:00
redhat
redhat
(RHSA-2024:1909) Important: firefox security update
2024-04-18 09:05:52
(RHSA-2024:1941) Low: thunderbird security update
2024-04-22 08:00:42
(RHSA-2024:1940) Low: thunderbird security update
2024-04-22 08:00:35
debian
debian
[SECURITY] [DSA 5663-1] firefox-esr security update
2024-04-17 17:21:09
[SECURITY] [DLA 3790-1] firefox-esr security update
2024-04-19 10:39:37
[SECURITY] [DLA 3791-1] thunderbird security update
2024-04-22 08:49:04
openvas
openvas
Debian: Security Advisory (DSA-5670-1)
2024-04-22 00:00:00
Debian: Security Advisory (DLA-3791-1)
2024-04-22 00:00:00
Mozilla Firefox ESR Security Update (mfsa_2024-19) - Mac OS X
2024-04-17 00:00:00
ubuntu
ubuntu
Thunderbird vulnerabilities
2024-04-25 00:00:00
Firefox vulnerabilities
2024-04-24 00:00:00
Firefox regressions
2024-05-02 00:00:00
mozilla
mozilla
Security Vulnerabilities fixed in Thunderbird 115.10 — Mozilla
2024-04-16 00:00:00
Security Vulnerabilities fixed in Firefox ESR 115.10 — Mozilla
2024-04-16 00:00:00
Security Vulnerabilities fixed in Firefox 125 — Mozilla
2024-04-16 00:00:00
mageia
mageia
Updated thunderbird packages fix security vulnerabilities
2024-04-27 03:37:18
Updated firefox packages fix security vulnerabilities
2024-04-27 09:26:16
slackware
slackware
[slackware-security] mozilla-firefox
2024-04-16 18:53:34
kaspersky
kaspersky
KLA65693 Multiple vulnerabilities in Mozilla Thunderbird
2024-04-16 00:00:00
KLA65640 Multiple vulnerabilities in Mozilla Firefox ESR
2024-04-16 00:00:00
KLA65639 Multiple vulnerabilities in Mozilla Firefox
2024-04-16 00:00:00
gentoo
gentoo
Mozilla Thunderbird: Multiple Vulnerabilities
2024-05-12 00:00:00