Vulnerability CVE-2023-25746: Information

Description

Memory safety bugs present in Firefox ESR 102.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Thunderbird < 102.8 and Firefox ESR < 102.8.

Severity: HIGH (8.8) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

URL: https://nvd.nist.gov/vuln/detail/CVE-2023-25746
Published: June 2, 2023
Modified: Nov. 7, 2023
Error type identifier: CWE-787

Fixed packages

Package name
Branch
Fixed in version
Version from repository
Errata ID
Task #
State
firefoxsisyphus103.0-alt1126.0.1-alt1ALT-PU-2022-2306-1304397Fixed
firefoxp10105.0.1-alt0.p10.1118.0.2-alt0.p10.1ALT-PU-2022-2930-1307737Fixed
firefoxp9105.0.1-alt0.c9.1105.0.1-alt0.c9.1ALT-PU-2023-4339-1319683Fixed
firefoxc10f1105.0.1-alt0.p10.1112.0.2-alt0.p10.1ALT-PU-2022-2930-1307737Fixed
firefoxc9f2105.0.1-alt0.c9.1105.0.1-alt0.c9.1ALT-PU-2023-1139-1309126Fixed
firefoxp11103.0-alt1126.0.1-alt1ALT-PU-2022-2306-1304397Fixed
firefox-esrsisyphus102.8.0-alt1115.11.0-alt1ALT-PU-2023-1386-1316235Fixed
firefox-esrp10102.8.0-alt1115.11.0-alt1ALT-PU-2023-1435-1316239Fixed
firefox-esrp9102.11.0-alt0.c9.1102.11.0-alt0.c9.1ALT-PU-2023-4365-2324721Fixed
firefox-esrc10f1102.8.0-alt1115.9.1-alt0.c10.1ALT-PU-2023-1435-1316239Fixed
firefox-esrc9f2102.10.0-alt0.c9.1102.12.0-alt0.c9.1ALT-PU-2023-1758-1319753Fixed
firefox-esrp11102.8.0-alt1115.11.0-alt1ALT-PU-2023-1386-1316235Fixed
thunderbirdsisyphus102.8.0-alt1115.9.0-alt1ALT-PU-2023-1374-1316076Fixed
thunderbirdp10102.8.0-alt1115.9.0-alt1ALT-PU-2023-1411-1316084Fixed
thunderbirdp9102.11.0-alt0.c9.1102.11.0-alt0.c9.1ALT-PU-2023-4366-2324721Fixed
thunderbirdc10f1102.8.0-alt1115.9.0-alt0.c10.1ALT-PU-2023-1411-1316084Fixed
thunderbirdc9f2102.10.0-alt0.c9.1102.11.0-alt0.c9.1ALT-PU-2023-1765-1319783Fixed
thunderbirdp11102.8.0-alt1115.9.0-alt1ALT-PU-2023-1374-1316076Fixed

References to Advisories, Solutions, and Tools

Hyperlink
Resource
https://bugzilla.mozilla.org/buglist.cgi?bug_id=1544127%2C1762368
  • Broken Link
  • Issue Tracking
  • Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2023-07/
  • Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2023-06/
  • Vendor Advisory

    1. Configuration 1

      cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*
      End excliding
      102.8
      cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*
      End excliding
      102.8
VKontakte|Telegram|YouTube|Forum|GitHub|Bugzilla
Version: v24.5.3
Back to top