Memory safety bugs present in Firefox 113, Firefox ESR 102.11, and Thunderbird 102.12. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox ESR < 102.12, Firefox < 114, and Thunderbird < 102.12.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade firefox-x11Upgrade thunderbirdUpgrade firefox | Jun 22, 2023 | Jun 19, 2023 |
| Alpine Linux | — | Upgrade firefoxUpgrade thunderbirdUpgrade firefox-esr | Aug 22, 2024 | Jun 19, 2023 |
| Amazon Linux Ami 2 | — | Upgrade firefoxUpgrade firefox-debuginfo | Sep 28, 2023 | Jun 19, 2023 |
| Centos_linux | — | Upgrade firefoxUpgrade thunderbird-debuginfoUpgrade thunderbirdUpgrade firefox-debuginfo | Jun 15, 2023 | Jun 12, 2023 |
| Debian | — | Upgrade firefox-esrUpgrade thunderbird | Jun 9, 2023 | Jun 9, 2023 |
| Gentoo Linux | — | Upgrade www-client/firefox.Upgrade www-client/firefox-bin.Upgrade mail-client/thunderbird.Upgrade mail-client/thunderbird-bin. | Dec 21, 2023 | Jun 19, 2023 |
| Mfsa2023 19 | — | Upgrade to Mozilla Firefox ESR version 102.12Upgrade to the latest version of Mozilla Firefox | Jun 7, 2023 | Jun 6, 2023 |
| Mfsa2023 20 | — | Upgrade to the latest version of Mozilla FirefoxUpgrade to Mozilla Firefox version 114.0 | Jun 7, 2023 | Jun 6, 2023 |
| Mozilla Thunderbird | — | Upgrade to the latest version of Mozilla ThunderbirdUpgrade to Mozilla Thunderbird version 102.12 | Jun 12, 2023 | Jun 7, 2023 |
| Oracle_linux | — | Upgrade firefoxUpgrade thunderbirdUpgrade firefox-x11 | May 21, 2024 | Jun 6, 2023 |
| Redhat_linux | — | Upgrade thunderbirdUpgrade firefox-debugsourceUpgrade thunderbird-debugsourceUpgrade firefox-x11Upgrade firefox-debuginfoNo solution existsUpgrade firefoxUpgrade thunderbird-debuginfo | Jun 15, 2023 | Jun 12, 2023 |
| Rocky_linux | — | Upgrade firefox-debugsourceUpgrade firefox-debuginfoUpgrade thunderbird-debugsourceUpgrade thunderbird-debuginfoUpgrade firefoxUpgrade thunderbird | Mar 5, 2024 | Jun 19, 2023 |
| Suse | — | Upgrade MozillaFirefoxUpgrade MozillaFirefox-translations-commonUpgrade mozillafirefox-branding-upstreamUpgrade MozillaFirefox-translations-otherUpgrade MozillaThunderbirdUpgrade MozillaThunderbird-translations-otherUpgrade MozillaFirefox-develUpgrade MozillaThunderbird-translations-common | Jun 8, 2023 | Jun 7, 2023 |
| Ubuntu | — | Upgrade libmozjs-102-0Upgrade thunderbirdUpgrade firefox | Jun 8, 2023 | Jun 7, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jun 19, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub