Mozilla Firefox und Thunderbird: Mehrere Schwachstellen

Summary

Product

Vulnerabilities 13

• High 7.8
  CVE-2023-37203

  Insufficient validation in the Drag and Drop API in conjunction with social engineering, may have allowed an attacker t…

  Mozilla Firefox firefox firefox-esr Browsers Ubuntu Alpine
  Jul 5, 2023
• Unscored —
  CVE-2023-3482

  When Firefox is configured to block storage of all cookies, it was still possible to store data in localstorage by usin…

  Mozilla Firefox firefox firefox-esr Browsers Ubuntu Alpine
  Jul 5, 2023
• Unscored —
  CVE-2023-37201

  An attacker could have triggered a use-after-free condition when creating a WebRTC connection over HTTPS. This vulnerab…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Jul 5, 2023
• Unscored —
  CVE-2023-37202

  Cross-compartment wrappers wrapping a scripted proxy could have caused objects from other compartments to be stored in …

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Jul 5, 2023
• Unscored —
  CVE-2023-37204

  A website could have obscured the fullscreen notification by using an option element by introducing lag via an expensiv…

  Mozilla Firefox firefox firefox-esr Browsers Ubuntu Alpine
  Jul 5, 2023
• Unscored —
  CVE-2023-37205

  The use of RTL Arabic characters in the address bar may have allowed for URL spoofing. This vulnerability affects Firef…

  Mozilla Firefox firefox firefox-esr Browsers Ubuntu Alpine
  Jul 5, 2023
• Unscored —
  CVE-2023-37206

  Uploading files which contain symlinks may have allowed an attacker to trick a user into submitting sensitive data to a…

  Mozilla Firefox firefox firefox-esr Browsers Ubuntu Alpine
  Jul 5, 2023
• Unscored —
  CVE-2023-37207

  A website could have obscured the fullscreen notification by using a URL with a scheme handled by an external program, …

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Jul 5, 2023
• Unscored —
  CVE-2023-37208

  When opening Diagcab files, Firefox did not warn the user that these files may contain malicious code. This vulnerabili…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Jul 5, 2023
• Unscored —
  CVE-2023-37209

  A use-after-free condition existed in `NotifyOnHistoryReload` where a `LoadingSessionHistoryEntry` object was freed and…

  Mozilla Firefox firefox firefox-esr Browsers Ubuntu Alpine
  Jul 5, 2023
• Unscored —
  CVE-2023-37210

  A website could prevent a user from exiting full-screen mode via alert and prompt calls. This could lead to user confus…

  Mozilla Firefox firefox firefox-esr Browsers Ubuntu Alpine
  Jul 5, 2023
• Unscored —
  CVE-2023-37211

  Memory safety bugs present in Firefox 114, Firefox ESR 102.12, and Thunderbird 102.12. Some of these bugs showed eviden…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Jul 5, 2023
• Unscored —
  CVE-2023-37212

  Memory safety bugs present in Firefox 114. Some of these bugs showed evidence of memory corruption and we presume that …

  Mozilla Firefox firefox firefox-esr Browsers Ubuntu Alpine
  Jul 5, 2023

Revision history

1. 2024-02-18 #15

   Neue Updates von Gentoo aufgenommen

2. 2024-01-07 #14

   Neue Updates von Gentoo aufgenommen

3. 2023-11-16 #13

   Neue Updates von Amazon aufgenommen

4. 2023-09-27 #12

   Neue Updates von Amazon aufgenommen

5. 2023-08-10 #11

   Neue Updates von Oracle Linux aufgenommen

6. 2023-07-25 #10

   Neue Updates von Amazon aufgenommen

7. 2023-07-23 #9

   Neue Updates von Oracle Linux aufgenommen

8. 2023-07-19 #8

   Neue Updates von SUSE aufgenommen

9. 2023-07-17 #7

   Neue Updates von Oracle Linux aufgenommen

10. 2023-07-16 #6

    Neue Updates von Oracle Linux aufgenommen

11. 2023-07-13 #5

    Neue Updates von Red Hat und Ubuntu aufgenommen

12. 2023-07-11 #4

    Neue Updates von Debian aufgenommen

13. 2023-07-10 #3

    Neue Updates von Fedora aufgenommen

14. 2023-07-09 #2

    Neue Updates von Debian aufgenommen

15. 2023-07-04 #1

    Initiale Fassung

References

• Mozilla Firefox Security Advisory MFSA2023-22 vom 2023-07-04
  https://www.mozilla.org/en-US/security/advisories/mfsa2023-22/
• Mozilla Firefox Security Advisory MFSA2023-23 vom 2023-07-04
  https://www.mozilla.org/en-US/security/advisories/mfsa2023-23/
• Mozilla Firefox Security Advisory MFSA2023-24 vom 2023-07-04
  https://www.mozilla.org/en-US/security/advisories/mfsa2023-24/
• Ubuntu Security Notice USN-6201-1 vom 2023-07-05
  https://ubuntu.com/security/notices/USN-6201-1
• Debian Security Advisory DSA-5451 vom 2023-07-09
  https://lists.debian.org/debian-security-announce/2023/msg00143.html
• Debian Security Advisory DLA-3484 vom 2023-07-08
  https://lists.debian.org/debian-lts-announce/2023/07/msg00006.html
• Debian Security Advisory DSA-5450 vom 2023-07-07
  https://lists.debian.org/debian-security-announce/2023/msg00142.html
• Fedora Security Advisory FEDORA-2023-A93D7639CD vom 2023-07-10
  https://bodhi.fedoraproject.org/updates/FEDORA-2023-a93d7639cd
• Fedora Security Advisory FEDORA-2023-4618764C6E vom 2023-07-10
  https://bodhi.fedoraproject.org/updates/FEDORA-2023-4618764c6e
• Ubuntu Security Notice USN-6214-1 vom 2023-07-11
  https://ubuntu.com/security/notices/USN-6214-1
• Debian Security Advisory DLA-3490 vom 2023-07-12
  https://lists.debian.org/debian-lts-announce/2023/07/msg00015.html
• Red Hat Security Advisory RHSA-2023:4073 vom 2023-07-13
  https://access.redhat.com/errata/RHSA-2023:4073
• Red Hat Security Advisory RHSA-2023:4074 vom 2023-07-13
  https://access.redhat.com/errata/RHSA-2023:4074
• Red Hat Security Advisory RHSA-2023:4075 vom 2023-07-13
  https://access.redhat.com/errata/RHSA-2023:4075
• Red Hat Security Advisory RHSA-2023:4076 vom 2023-07-13
  https://access.redhat.com/errata/RHSA-2023:4076
• Red Hat Security Advisory RHSA-2023:4079 vom 2023-07-13
  https://access.redhat.com/errata/RHSA-2023:4079
• Ubuntu Security Notice USN-6227-1 vom 2023-07-13
  https://ubuntu.com/security/notices/USN-6227-1
• Red Hat Security Advisory RHSA-2023:4067 vom 2023-07-13
  https://access.redhat.com/errata/RHSA-2023:4067
• Red Hat Security Advisory RHSA-2023:4063 vom 2023-07-13
  https://access.redhat.com/errata/RHSA-2023:4063
• Red Hat Security Advisory RHSA-2023:4064 vom 2023-07-13
  https://access.redhat.com/errata/RHSA-2023:4064
• Red Hat Security Advisory RHSA-2023:4065 vom 2023-07-13
  https://access.redhat.com/errata/RHSA-2023:4065
• Red Hat Security Advisory RHSA-2023:4066 vom 2023-07-13
  https://access.redhat.com/errata/RHSA-2023:4066
• Red Hat Security Advisory RHSA-2023:4068 vom 2023-07-13
  https://access.redhat.com/errata/RHSA-2023:4068
• Red Hat Security Advisory RHSA-2023:4069 vom 2023-07-13
  https://access.redhat.com/errata/RHSA-2023:4069
• Red Hat Security Advisory RHSA-2023:4070 vom 2023-07-13
  https://access.redhat.com/errata/RHSA-2023:4070
• Red Hat Security Advisory RHSA-2023:4071 vom 2023-07-13
  https://access.redhat.com/errata/RHSA-2023:4071
• Red Hat Security Advisory RHSA-2023:4072 vom 2023-07-13
  https://access.redhat.com/errata/RHSA-2023:4072
• Red Hat Security Advisory RHSA-2023:4062 vom 2023-07-13
  https://access.redhat.com/errata/RHSA-2023:4062
• Oracle Linux Security Advisory ELSA-2023-4062 vom 2023-07-17
  https://linux.oracle.com/errata/ELSA-2023-4062.html
• SUSE Security Update SUSE-SU-2023:2850-1 vom 2023-07-17
  https://lists.suse.com/pipermail/sle-security-updates/2023-July/015501.html
• SUSE Security Update SUSE-SU-2023:2849-1 vom 2023-07-17
  https://lists.suse.com/pipermail/sle-security-updates/2023-July/015502.html
• Oracle Linux Security Advisory ELSA-2023-4076 vom 2023-07-17
  https://linux.oracle.com/errata/ELSA-2023-4076.html
• Oracle Linux Security Advisory ELSA-2023-4071 vom 2023-07-17
  https://linux.oracle.com/errata/ELSA-2023-4071.html
• Oracle Linux Security Advisory ELSA-2023-4064 vom 2023-07-17
  https://linux.oracle.com/errata/ELSA-2023-4064.html
• SUSE Security Update SUSE-SU-2023:2886-1 vom 2023-07-19
  https://lists.suse.com/pipermail/sle-security-updates/2023-July/015531.html
• Oracle Linux Security Advisory ELSA-2023-4079 vom 2023-07-21
  https://linux.oracle.com/errata/ELSA-2023-4079.html
• Amazon Linux Security Advisory ALAS2-2023-2156 vom 2023-07-26
  https://alas.aws.amazon.com/AL2/ALAS-2023-2156.html
• Oracle Linux Security Advisory ELSA-2023-4063 vom 2023-08-10
  https://oss.oracle.com/pipermail/el-errata/2023-August/014363.html
• Amazon Linux Security Advisory ALASFIREFOX-2023-001 vom 2023-09-28
  https://alas.aws.amazon.com/AL2/ALASFIREFOX-2023-001.html
• Amazon Linux Security Advisory ALASFIREFOX-2023-017 vom 2023-11-17
  https://alas.aws.amazon.com/AL2/ALASFIREFOX-2023-017.html
• Gentoo Linux Security Advisory GLSA-202401-10 vom 2024-01-07
  https://security.gentoo.org/glsa/202401-10
• Gentoo Linux Security Advisory GLSA-202402-25 vom 2024-02-19
  https://security.gentoo.org/glsa/202402-25