Memory safety bugs present in Firefox 113, Firefox ESR 102.11, and Thunderbird 102.12. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox ESR < 102.12, Firefox < 114, and Thunderbird < 102.12.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade thunderbirdUpgrade firefoxUpgrade firefox-x11 | Jun 22, 2023 | Jun 19, 2023 |
| Alpine Linux | — | Upgrade firefox-esrUpgrade firefoxUpgrade thunderbird | Aug 22, 2024 | Jun 19, 2023 |
| Amazon Linux Ami 2 | — | Upgrade firefoxUpgrade firefox-debuginfo | Sep 28, 2023 | Jun 19, 2023 |
| Centos_linux | — | Upgrade firefox-debuginfoUpgrade thunderbird-debuginfoUpgrade firefoxUpgrade thunderbird | Jun 15, 2023 | Jun 12, 2023 |
| Debian | — | Upgrade thunderbirdUpgrade firefox-esr | Jun 9, 2023 | Jun 9, 2023 |
| Gentoo Linux | — | Upgrade mail-client/thunderbird-bin.Upgrade www-client/firefox-bin.Upgrade www-client/firefox.Upgrade mail-client/thunderbird. | Dec 21, 2023 | Jun 19, 2023 |
| Mfsa2023 19 | — | Upgrade to Mozilla Firefox ESR version 102.12 | Jun 7, 2023 | Jun 6, 2023 |
| Mfsa2023 20 | — | Upgrade to Mozilla Firefox version 114.0 | Jun 7, 2023 | Jun 6, 2023 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 102.12 | Jun 12, 2023 | Jun 7, 2023 |
| Oracle_linux | — | Upgrade firefoxUpgrade thunderbirdUpgrade firefox-x11 | May 21, 2024 | Jun 6, 2023 |
| Redhat_linux | — | Upgrade firefoxUpgrade firefox-debuginfoNo solution existsUpgrade firefox-debugsourceUpgrade thunderbird-debugsourceUpgrade firefox-x11Upgrade thunderbird-debuginfoUpgrade thunderbird | Jun 15, 2023 | Jun 12, 2023 |
| Rocky_linux | — | Upgrade thunderbird-debugsourceUpgrade firefox-debugsourceUpgrade firefox-debuginfoUpgrade thunderbird-debuginfoUpgrade thunderbirdUpgrade firefox | Mar 5, 2024 | Jun 19, 2023 |
| Suse | — | Upgrade MozillaFirefox-translations-otherUpgrade mozillafirefox-branding-upstreamUpgrade MozillaThunderbirdUpgrade MozillaThunderbird-translations-otherUpgrade MozillaFirefox-develUpgrade MozillaThunderbird-translations-commonUpgrade MozillaFirefoxUpgrade MozillaFirefox-translations-common | Jun 8, 2023 | Jun 7, 2023 |
| Ubuntu | — | Upgrade firefoxUpgrade thunderbirdUpgrade libmozjs-102-0 | Jun 8, 2023 | Jun 7, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jun 19, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub