Vulnerability CVE-2024-2605: Information

Description

An attacker could have leveraged the Windows Error Reporter to run arbitrary code on the system escaping the sandbox. *Note:* This issue only affected Windows operating systems. Other operating systems are unaffected. This vulnerability affects Firefox < 124, Firefox ESR < 115.9, and Thunderbird < 115.9.

URL: https://nvd.nist.gov/vuln/detail/CVE-2024-2605
Published: March 19, 2024
Modified: March 19, 2024

Fixed packages

Package name
Branch
Fixed in version
Version from repository
Errata ID
Task #
State
firefoxsisyphus124.0-alt1125.0.2-alt1ALT-PU-2024-4271-2343190Fixed
firefoxsisyphus_riscv64124.0.1-alt0.port124.0.1-alt0.portALT-PU-2024-6052-1-Fixed
firefoxsisyphus_loongarch64124.0-alt1.0.port125.0.1-alt1.0.portALT-PU-2024-4597-1-Fixed
firefox-esrsisyphus115.9.1-alt1115.10.0-alt1ALT-PU-2024-4963-2344244Fixed
firefox-esrsisyphus_loongarch64115.9.1-alt1115.10.0-alt1ALT-PU-2024-5937-1-Fixed
firefox-esrp10115.9.1-alt1115.10.0-alt1ALT-PU-2024-4971-3344254Fixed
firefox-esrc10f1115.9.1-alt0.c10.1115.9.1-alt0.c10.1ALT-PU-2024-6027-2344289Fixed
thunderbirdsisyphus115.9.0-alt1115.9.0-alt1ALT-PU-2024-4973-2344245Fixed
thunderbirdsisyphus_loongarch64115.9.0-alt1115.9.0-alt1ALT-PU-2024-5939-1-Fixed
thunderbirdp10115.9.0-alt1115.9.0-alt1ALT-PU-2024-5117-3344280Fixed
thunderbirdc10f1115.9.0-alt0.c10.1115.9.0-alt0.c10.1ALT-PU-2024-6213-2344693Fixed

References to Advisories, Solutions, and Tools

Hyperlink
Resource
https://bugzilla.mozilla.org/show_bug.cgi?id=1872920
    https://www.mozilla.org/security/advisories/mfsa2024-12/
      https://www.mozilla.org/security/advisories/mfsa2024-13/
        https://www.mozilla.org/security/advisories/mfsa2024-14/
          VKontakte|Telegram|YouTube|Forum|GitHub|Bugzilla
          Version: v24.4.2
          Back to top