A compromised content process could have provided malicious data in a PathRecording resulting In an out-of-bounds write, leading to a potentially exploitable crash in a privileged process. Script_name(english:"Mozilla Firefox ESR FilterNodeD2D1 resulting Script_set_attribute(attribute:"plugin_modification_date", value:"6") # The text itself is copyright (C) Mozilla Foundation. # extracted from Mozilla Foundation Security Advisory mfsa2023-42. # The descriptive text and package checks in this plugin were Note that Nessus has not tested for these issues but has instead relied only on the application’s self-reported version number. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. Memory safety bugs present in Firefox 117, Firefox ESR 115.2, and Thunderbird 115.2. This bug only affects Firefox on Windows when run in non-standard configurations (such as using runas). If Windows failed to duplicate a handle during process creation, the sandbox code may have inadvertently freed a pointer twice, resulting in a use-after-free and a potentially exploitable crash. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2023-42 advisory.Ī compromised content process could have provided malicious data to FilterNodeD2D1 resulting in an out-of-bounds write, leading to a potentially exploitable crash in a privileged process.Ī compromised content process could have provided malicious data in a PathRecording resulting in an out-of-bounds write, leading to a potentially exploitable crash in a privileged process.ĭuring Ion compilation, a Garbage Collection could have resulted in a use-after-free condition, allowing an attacker to write two NUL bytes, and cause a potentially exploitable crash. The version of Firefox ESR installed on the remote Windows host is prior to 115.3.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |