Low WID-SEC-2024-1784 4 CVEs

Mozilla Firefox für iOS: Mehrere Schwachstellen

Published Aug 6, 2024 · Updated Aug 6, 2024 · de-DE

Vendor: Mozilla Product: Firefox Platform: iOS

Summary

Ein entfernter anonymer Angreifer kann mehrere Schwachstellen in Mozilla Firefox für iOS ausnutzen, um einen Cross-Site-Scripting-Angriff zu starten oder den Benutzer auf eine bösartige Website umzuleiten.

Product

Firefox ist ein Open Source Web Browser.

Vulnerabilities 4

Critical 9.8

CVE-2024-43111

Long pressing on a download link could potentially allow Javascript commands to be executed within the browser This vul…

Mozilla Firefox for iOS firefox iOS Browsers Wolfi

Aug 6, 2024
Medium 6.1

CVE-2024-0953

When a user scans a QR Code with the QR Code Scanner feature, the user is not prompted before being navigated to the pa…

Mozilla Firefox for iOS firefox iOS Browsers Wolfi

Feb 5, 2024
Medium 6.1

CVE-2024-43112

Long pressing on a download link could potentially provide a means for cross-site scripting This vulnerability affects …

Mozilla Firefox for iOS firefox iOS Browsers Wolfi

Aug 6, 2024
Medium 6.1

CVE-2024-43113

The contextual menu for links could provide an opportunity for cross-site scripting attacks This vulnerability affects …

Mozilla Firefox for iOS firefox iOS Browsers Wolfi

Aug 6, 2024

Revision history

2024-08-06 #1
Initiale Fassung

References

Mozilla Foundation Security Advisory vom 2024-08-06
https://www.mozilla.org/en-US/security/advisories/mfsa2024-36/