Memory safety bugs present in Firefox 113, Firefox ESR 102.11, and Thunderbird 102.12. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox ESR < 102.12, Firefox < 114, and Thunderbird < 102.12.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade firefoxUpgrade thunderbirdUpgrade firefox-x11 | Jun 22, 2023 | Jun 19, 2023 |
| Alpine Linux | — | Upgrade firefox-esrUpgrade firefoxUpgrade thunderbird | Aug 22, 2024 | Jun 19, 2023 |
| Amazon Linux Ami 2 | — | Upgrade firefox-debuginfoUpgrade firefox | Sep 28, 2023 | Jun 19, 2023 |
| Centos_linux | — | Upgrade firefox-debuginfoUpgrade thunderbirdUpgrade firefoxUpgrade thunderbird-debuginfo | Jun 15, 2023 | Jun 12, 2023 |
| Debian | — | Upgrade thunderbirdUpgrade firefox-esr | Jun 9, 2023 | Jun 9, 2023 |
| Gentoo Linux | — | Upgrade www-client/firefox-bin.Upgrade www-client/firefox.Upgrade mail-client/thunderbird.Upgrade mail-client/thunderbird-bin. | Dec 21, 2023 | Jun 19, 2023 |
| Mfsa2023 19 | — | Upgrade to Mozilla Firefox ESR version 102.12Upgrade to the latest version of Mozilla Firefox | Jun 7, 2023 | Jun 6, 2023 |
| Mfsa2023 20 | — | Upgrade to Mozilla Firefox version 114.0Upgrade to the latest version of Mozilla Firefox | Jun 7, 2023 | Jun 6, 2023 |
| Mozilla Thunderbird | — | Upgrade to the latest version of Mozilla ThunderbirdUpgrade to Mozilla Thunderbird version 102.12 | Jun 12, 2023 | Jun 7, 2023 |
| Oracle_linux | — | Upgrade firefoxUpgrade thunderbirdUpgrade firefox-x11 | May 21, 2024 | Jun 6, 2023 |
| Redhat_linux | — | Upgrade thunderbirdUpgrade firefoxUpgrade firefox-x11No solution existsUpgrade firefox-debugsourceUpgrade thunderbird-debugsourceUpgrade thunderbird-debuginfoUpgrade firefox-debuginfo | Jun 15, 2023 | Jun 12, 2023 |
| Rocky_linux | — | Upgrade thunderbirdUpgrade firefoxUpgrade firefox-debugsourceUpgrade firefox-debuginfoUpgrade thunderbird-debugsourceUpgrade thunderbird-debuginfo | Mar 5, 2024 | Jun 19, 2023 |
| Suse | — | Upgrade MozillaFirefox-translations-commonUpgrade MozillaFirefoxUpgrade MozillaFirefox-develUpgrade MozillaThunderbird-translations-commonUpgrade mozillafirefox-branding-upstreamUpgrade MozillaThunderbirdUpgrade MozillaFirefox-translations-otherUpgrade MozillaThunderbird-translations-other | Jun 8, 2023 | Jun 7, 2023 |
| Ubuntu | — | Upgrade thunderbirdUpgrade firefoxUpgrade libmozjs-102-0 | Jun 8, 2023 | Jun 7, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jun 19, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub