Summary
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.
Security Fix(es):
* firefox: Use-after-free in Animation timeline (128.3.1 ESR Chemspill) (CVE-2024-9680)
* firefox: thunderbird: History interface could have been used to cause a Denial of Service condition in the browser (CVE-2024-10464)
* firefox: thunderbird: XSS due to Content-Disposition being ignored in multipart/x-mixed-replace response (CVE-2024-10461)
* firefox: thunderbird: Permission leak via embed or object elements (CVE-2024-10458)
* firefox: thunderbird: Use-after-free in layout with accessibility (CVE-2024-10459)
* firefox: thunderbird: Memory safety bugs fixed in Firefox 132, Thunderbird 132, Firefox ESR 128.4, and Thunderbird 128.4 (CVE-2024-10467)
* firefox: thunderbird: Clipboard "paste" button persisted across tabs (CVE-2024-10465)
* firefox: DOM push subscription message could hang Firefox (CVE-2024-10466)
* firefox: thunderbird: Cross origin video frame leak (CVE-2024-10463)
* firefox: thunderbird: Origin of permission prompt could be spoofed by long URL (CVE-2024-10462)
* firefox: thunderbird: Confusing display of origin for external protocol handler prompt (CVE-2024-10460)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux · 9 | firefox | 128.4.0-1.el9_5 |
| AlmaLinux · 9 | firefox-x11 | 128.4.0-1.el9_5 |
Vulnerabilities 11
-
Critical 9.8
An attacker was able to achieve code execution in the content process by exploiting a use-after-free in Animation timel…
KEV Oct 15, 2024 -
Critical 9.8
Memory safety bugs present in Firefox 131, Firefox ESR 128.3, and Thunderbird 128.3. Some of these bugs showed evidence…
-
High 7.5
Truncation of a long URL could have allowed origin spoofing in a permission prompt. This vulnerability affects Firefox …
-
High 7.5
Video frames could have been leaked between origins in some situations. This vulnerability affects Firefox < 132, Firef…
-
High 7.5
Repeated writes to history interface attributes could have been used to cause a Denial of Service condition in the brow…
-
High 7.5
A clipboard "paste" button could persist across tabs which allowed a spoofing attack. This vulnerability affects Firefo…
-
High 7.5
By sending a specially crafted push message, a remote server could have hung the parent process, causing the browser to…
-
Medium 6.5
A permission leak could have occurred from a trusted site to an untrusted site via `embed` or `object` elements. This v…
-
Medium 6.5
An attacker could have caused a use-after-free when accessibility was enabled, leading to a potentially exploitable cra…
-
Medium 6.1
In multipart/x-mixed-replace responses, `Content-Disposition: attachment` in the response header was not respected and …
-
Medium 5.4
The origin of an external protocol handler prompt could have been obscured using a data: URL within an `iframe`. This v…
References
-
report
https://access.redhat.com/security/cve/CVE-2024-10458
-
report
https://access.redhat.com/security/cve/CVE-2024-10459
-
report
https://access.redhat.com/security/cve/CVE-2024-10460
-
report
https://access.redhat.com/security/cve/CVE-2024-10461
-
report
https://access.redhat.com/security/cve/CVE-2024-10462
-
report
https://access.redhat.com/security/cve/CVE-2024-10463
-
report
https://access.redhat.com/security/cve/CVE-2024-10464
-
report
https://access.redhat.com/security/cve/CVE-2024-10465
-
report
https://access.redhat.com/security/cve/CVE-2024-10466
-
report
https://access.redhat.com/security/cve/CVE-2024-10467
-
report
https://access.redhat.com/security/cve/CVE-2024-9680
-
report
https://bugzilla.redhat.com/2317442
-
report
https://bugzilla.redhat.com/2322424
-
report
https://bugzilla.redhat.com/2322425
-
report
https://bugzilla.redhat.com/2322428
-
report
https://bugzilla.redhat.com/2322429
-
report
https://bugzilla.redhat.com/2322433
-
report
https://bugzilla.redhat.com/2322434
-
report
https://bugzilla.redhat.com/2322438
-
report
https://bugzilla.redhat.com/2322439
-
report
https://bugzilla.redhat.com/2322440
-
report
https://bugzilla.redhat.com/2322444
-
advisory
https://errata.almalinux.org/9/ALSA-2024-9554.html