Mozilla Products Multiple Vulnerabilities
Release Date: 9 Jan 2025
RISK: Medium Risk
TYPE: Clients - Browsers
Multiple vulnerabilities were identified in Mozilla Products. A remote attacker could exploit some of these vulnerabilities to trigger elevation of privilege, security restriction bypass, denial of service condition, remote code execution and spoofing on the targeted system.
Impact
- Denial of Service
- Elevation of Privilege
- Remote Code Execution
- Security Restriction Bypass
- Spoofing
System / Technologies affected
Versions prior to:
- Firefox 134
- Firefox ESR 128.6
- Firefox ESR 115.19
- Thunderbird 134
- Thunderbird 128.6
- Thunderbird 115.19
Solutions
Before installation of the software, please visit the vendor web-site for more details.
Apply fixes issued by the vendor:
- Firefox 134
- Firefox ESR 128.6
- Firefox ESR 115.19
- Thunderbird 134
- Thunderbird 128.6
- Thunderbird 115.19
Vulnerability Identifier
- CVE-2025-0237
- CVE-2025-0238
- CVE-2025-0239
- CVE-2025-0240
- CVE-2025-0241
- CVE-2025-0242
- CVE-2025-0243
- CVE-2025-0244
- CVE-2025-0245
- CVE-2025-0246
- CVE-2025-0247
沒有留言:
發佈留言