Mozilla Products Multiple Vulnerabilities
Release Date: 3 Aug 2023
RISK: Medium Risk
TYPE: Clients - Browsers
Multiple vulnerabilities were identified in Mozilla Products. A remote attacker could exploit some of these vulnerabilities to trigger denial of service condition, elevation of privilege, remote code execution, security restriction bypass and sensitive information disclosure on the targeted system.
Impact
- Denial of Service
- Elevation of Privilege
- Remote Code Execution
- Security Restriction Bypass
- Information Disclosure
System / Technologies affected
Versions prior to:
- Firefox 116
- Firefox ESR 102.14
- Firefox ESR 115.1
- Thunderbird 102.14
- Thunderbird 115.1
Solutions
Before installation of the software, please visit the vendor web-site for more details.
Apply fixes issued by the vendor:
- Firefox 116
- Firefox ESR 102.14
- Firefox ESR 115.1
- Thunderbird 102.14
- Thunderbird 115.1
Vulnerability Identifier
- CVE-2023-4045
- CVE-2023-4046
- CVE-2023-4047
- CVE-2023-4048
- CVE-2023-4049
- CVE-2023-4050
- CVE-2023-4051
- CVE-2023-4052
- CVE-2023-4053
- CVE-2023-4054
- CVE-2023-4055
- CVE-2023-4056
- CVE-2023-4057
- CVE-2023-4058
Source
Related Link
- https://www.mozilla.org/en-US/security/advisories/mfsa2023-29/
- https://www.mozilla.org/en-US/security/advisories/mfsa2023-30/
- https://www.mozilla.org/en-US/security/advisories/mfsa2023-31/
- https://www.mozilla.org/en-US/security/advisories/mfsa2023-32/
- https://www.mozilla.org/en-US/security/advisories/mfsa2023-33/
沒有留言:
發佈留言