Memory safety bugs present in Firefox 113, Firefox ESR 102.11, and Thunderbird 102.12. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox ESR < 102.12, Firefox < 114, and Thunderbird < 102.12.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade thunderbirdUpgrade firefox-x11Upgrade firefox | Jun 22, 2023 | Jun 19, 2023 |
| Alpine Linux | — | Upgrade firefox-esrUpgrade firefoxUpgrade thunderbird | Aug 22, 2024 | Jun 19, 2023 |
| Amazon Linux Ami 2 | — | Upgrade firefoxUpgrade firefox-debuginfo | Sep 28, 2023 | Jun 19, 2023 |
| Centos_linux | — | Upgrade firefoxUpgrade thunderbird-debuginfoUpgrade thunderbirdUpgrade firefox-debuginfo | Jun 15, 2023 | Jun 12, 2023 |
| Debian | — | Upgrade thunderbirdUpgrade firefox-esr | Jun 9, 2023 | Jun 9, 2023 |
| Gentoo Linux | — | Upgrade mail-client/thunderbird-bin.Upgrade www-client/firefox.Upgrade www-client/firefox-bin.Upgrade mail-client/thunderbird. | Dec 21, 2023 | Jun 19, 2023 |
| Mfsa2023 19 | — | Upgrade to the latest version of Mozilla FirefoxUpgrade to Mozilla Firefox ESR version 102.12 | Jun 7, 2023 | Jun 6, 2023 |
| Mfsa2023 20 | — | Upgrade to Mozilla Firefox version 114.0Upgrade to the latest version of Mozilla Firefox | Jun 7, 2023 | Jun 6, 2023 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 102.12Upgrade to the latest version of Mozilla Thunderbird | Jun 12, 2023 | Jun 7, 2023 |
| Oracle_linux | — | Upgrade firefoxUpgrade thunderbirdUpgrade firefox-x11 | May 21, 2024 | Jun 6, 2023 |
| Redhat_linux | — | Upgrade thunderbirdUpgrade firefox-x11Upgrade thunderbird-debugsourceUpgrade firefoxUpgrade thunderbird-debuginfoNo solution existsUpgrade firefox-debugsourceUpgrade firefox-debuginfo | Jun 15, 2023 | Jun 12, 2023 |
| Rocky_linux | — | Upgrade thunderbird-debugsourceUpgrade firefox-debugsourceUpgrade thunderbird-debuginfoUpgrade firefox-debuginfoUpgrade firefoxUpgrade thunderbird | Mar 5, 2024 | Jun 19, 2023 |
| Suse | — | Upgrade MozillaThunderbird-translations-otherUpgrade MozillaThunderbird-translations-commonUpgrade MozillaThunderbirdUpgrade MozillaFirefox-develUpgrade mozillafirefox-branding-upstreamUpgrade MozillaFirefox-translations-otherUpgrade MozillaFirefox-translations-commonUpgrade MozillaFirefox | Jun 8, 2023 | Jun 7, 2023 |
| Ubuntu | — | Upgrade firefoxUpgrade thunderbirdUpgrade libmozjs-102-0 | Jun 8, 2023 | Jun 7, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jun 19, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub