Mozilla Firefox, ESR und Thunderbird: Mehrere Schwachstellen

Summary

Product

Vulnerabilities 11

• Critical 9.8
  CVE-2024-10467

  Memory safety bugs present in Firefox 131, Firefox ESR 128.3, and Thunderbird 128.3. Some of these bugs showed evidence…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Wolfi
  Oct 29, 2024
• Critical 9.8
  CVE-2024-10468

  Potential race conditions in IndexedDB could have caused memory corruption, leading to a potentially exploitable crash.…

  Mozilla Firefox Thunderbird thunderbird Browsers Ubuntu Wolfi
  Oct 29, 2024
• High 7.5
  CVE-2024-10462

  Truncation of a long URL could have allowed origin spoofing in a permission prompt. This vulnerability affects Firefox …

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Wolfi
  Oct 29, 2024
• High 7.5
  CVE-2024-10463

  Video frames could have been leaked between origins in some situations. This vulnerability affects Firefox < 132, Firef…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine Wolfi
  Oct 29, 2024
• High 7.5
  CVE-2024-10464

  Repeated writes to history interface attributes could have been used to cause a Denial of Service condition in the brow…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Wolfi
  Oct 29, 2024
• High 7.5
  CVE-2024-10465

  A clipboard "paste" button could persist across tabs which allowed a spoofing attack. This vulnerability affects Firefo…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Wolfi
  Oct 29, 2024
• High 7.5
  CVE-2024-10466

  By sending a specially crafted push message, a remote server could have hung the parent process, causing the browser to…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Wolfi
  Oct 29, 2024
• Medium 6.5
  CVE-2024-10458

  A permission leak could have occurred from a trusted site to an untrusted site via `embed` or `object` elements. This v…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine Wolfi
  Oct 29, 2024
• Medium 6.5
  CVE-2024-10459

  An attacker could have caused a use-after-free when accessibility was enabled, leading to a potentially exploitable cra…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine Wolfi
  Oct 29, 2024
• Medium 6.1
  CVE-2024-10461

  In multipart/x-mixed-replace responses, `Content-Disposition: attachment` in the response header was not respected and …

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Wolfi
  Oct 29, 2024
• Medium 5.4
  CVE-2024-10460

  The origin of an external protocol handler prompt could have been obscured using a data: URL within an `iframe`. This v…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Wolfi
  Oct 29, 2024

Revision history

1. 2026-02-02 #21

   Neue Updates von Ubuntu aufgenommen

2. 2025-05-13 #20

   Neue Updates von Gentoo aufgenommen

3. 2025-03-09 #19

   Neue Updates von Amazon aufgenommen

4. 2025-03-02 #18

   Neue Updates von Amazon aufgenommen

5. 2025-02-25 #17

   Neue Updates von Amazon aufgenommen

6. 2025-01-22 #16

   Neue Updates von Gentoo aufgenommen

7. 2024-12-15 #15

   Neue Updates von openSUSE aufgenommen

8. 2024-12-08 #14

   Neue Updates von Gentoo aufgenommen

9. 2024-11-25 #13

   Neue Updates von SUSE aufgenommen

10. 2024-11-19 #12

    Neue Updates von Oracle Linux aufgenommen

11. 2024-11-13 #11

    Neue Updates von Red Hat und Amazon aufgenommen

12. 2024-11-12 #10

    Neue Updates von openSUSE aufgenommen

13. 2024-11-10 #9

    Neue Updates von Rocky Enterprise Software Foundation und Oracle Linux aufgenommen

14. 2024-11-07 #8

    Neue Updates von IGEL und Red Hat aufgenommen

15. 2024-11-06 #7

    Neue Updates von openSUSE aufgenommen

16. 2024-11-05 #6

    Neue Updates von Debian aufgenommen

17. 2024-11-04 #5

    Neue Updates von SUSE, Debian, Fedora und Oracle Linux aufgenommen

18. 2024-11-03 #4

    Neue Updates von Oracle Linux und Red Hat aufgenommen

19. 2024-10-31 #3

    Neue Updates von openSUSE, Red Hat und Debian aufgenommen

20. 2024-10-30 #2

    Neue Updates von Ubuntu aufgenommen

21. 2024-10-29 #1

    Initiale Fassung

References

• MFSA 2024-55 Security Vulnerabilities fixed in Firefox 132 vom 2024-10-29
  https://www.mozilla.org/en-US/security/advisories/mfsa2024-55/
• MFSA 2024-56 Security Vulnerabilities fixed in Firefox ESR 128.4 vom 2024-10-29
  https://www.mozilla.org/en-US/security/advisories/mfsa2024-56/
• MFSA 2024-57 Security Vulnerabilities fixed in Firefox ESR 115.17 vom 2024-10-29
  https://www.mozilla.org/en-US/security/advisories/mfsa2024-57/
• MFSA 2024-58 Security Vulnerabilities fixed in Thunderbird 128.4 vom 2024-10-29
  https://www.mozilla.org/en-US/security/advisories/mfsa2024-58/
• MFSA 2024-59 Security Vulnerabilities fixed in Thunderbird 132 vom 2024-10-29
  https://www.mozilla.org/en-US/security/advisories/mfsa2024-59/
• Fedora Security Advisory FEDORA-2024-2B2993A69D vom 2024-10-30
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-2b2993a69d
• Ubuntu Security Notice USN-7086-1 vom 2024-10-31
  https://ubuntu.com/security/notices/USN-7086-1
• openSUSE Security Update OPENSUSE-SU-2024:14438-1 vom 2024-10-31
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/OKGXW7DPNDYB4LMICKFHXVP4VGGAXSIO/
• Red Hat Security Advisory RHSA-2024:8726 vom 2024-10-31
  https://access.redhat.com/errata/RHSA-2024:8726
• Red Hat Security Advisory RHSA-2024:8727 vom 2024-10-31
  https://access.redhat.com/errata/RHSA-2024:8727
• Debian Security Advisory DSA-5801 vom 2024-10-31
  https://lists.debian.org/debian-security-announce/2024/msg00215.html
• Debian Security Advisory DSA-5801 vom 2024-10-31
  https://security-tracker.debian.org/tracker/DSA-5801-1
• Red Hat Security Advisory RHSA-2024:8728 vom 2024-10-31
  https://access.redhat.com/errata/RHSA-2024:8728
• Red Hat Security Advisory RHSA-2024:8729 vom 2024-10-31
  https://access.redhat.com/errata/RHSA-2024:8729
• Debian Security Advisory DLA-3943 vom 2024-10-31
  https://lists.debian.org/debian-lts-announce/2024/10/msg00034.html
• Red Hat Security Advisory RHSA-2024:8720 vom 2024-10-31
  https://access.redhat.com/errata/RHSA-2024:8720
• Red Hat Security Advisory RHSA-2024:8721 vom 2024-10-31
  https://access.redhat.com/errata/RHSA-2024:8721
• Red Hat Security Advisory RHSA-2024:8722 vom 2024-10-31
  https://access.redhat.com/errata/RHSA-2024:8722
• Red Hat Security Advisory RHSA-2024:8723 vom 2024-10-31
  https://access.redhat.com/errata/RHSA-2024:8723
• Red Hat Security Advisory RHSA-2024:8724 vom 2024-10-31
  https://access.redhat.com/errata/RHSA-2024:8724
• Red Hat Security Advisory RHSA-2024:8725 vom 2024-10-31
  https://access.redhat.com/errata/RHSA-2024:8725
• Oracle Linux Security Advisory ELSA-2024-8726 vom 2024-11-01
  https://linux.oracle.com/errata/ELSA-2024-8726.html
• Red Hat Security Advisory RHSA-2024:8790 vom 2024-11-04
  https://access.redhat.com/errata/RHSA-2024:8790
• Oracle Linux Security Advisory ELSA-2024-8729 vom 2024-11-01
  https://linux.oracle.com/errata/ELSA-2024-8729.html
• Red Hat Security Advisory RHSA-2024:8793 vom 2024-11-04
  https://access.redhat.com/errata/RHSA-2024:8793
• SUSE Security Update SUSE-SU-2024:3898-1 vom 2024-11-04
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/IPK5FOCTB42333ZD74LQ3SZOYHZEW7ZV/
• SUSE Security Update SUSE-SU-2024:3898-1 vom 2024-11-04
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/IPK5FOCTB42333ZD74LQ3SZOYHZEW7ZV/
• Debian Security Advisory DLA-3944 vom 2024-11-04
  https://lists.debian.org/debian-lts-announce/2024/11/msg00001.html
• Fedora Security Advisory FEDORA-2024-D1BA38D9A6 vom 2024-11-04
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-d1ba38d9a6
• Oracle Linux Security Advisory ELSA-2024-8793 vom 2024-11-04
  https://linux.oracle.com/errata/ELSA-2024-8793.html
• SUSE Security Update SUSE-SU-2024:3899-1 vom 2024-11-04
  https://lists.suse.com/pipermail/sle-security-updates/2024-November/019772.html
• Oracle Linux Security Advisory ELSA-2024-8790 vom 2024-11-04
  https://linux.oracle.com/errata/ELSA-2024-8790.html
• Debian Security Advisory DSA-5803 vom 2024-11-05
  https://lists.debian.org/debian-security-announce/2024/msg00217.html
• Debian Security Advisory DSA-5803 vom 2024-11-05
  https://security-tracker.debian.org/tracker/DSA-5803-1
• openSUSE Security Update OPENSUSE-SU-2024:14461-1 vom 2024-11-06
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/CCWATMIG62O32XUBJEQYUSP2IIXEHEMF/
• IGEL Security Notice ISN-2024-22 vom 2024-11-07
  https://kb.igel.com/security-safety/current/isn-2024-22-firefox-esr-vulnerabilities
• Red Hat Security Advisory RHSA-2024:9015 vom 2024-11-07
  https://access.redhat.com/errata/RHSA-2024:9015
• Red Hat Security Advisory RHSA-2024:9016 vom 2024-11-07
  https://access.redhat.com/errata/RHSA-2024:9016
• Red Hat Security Advisory RHSA-2024:9017 vom 2024-11-07
  https://access.redhat.com/errata/RHSA-2024:9017
• Red Hat Security Advisory RHSA-2024:9018 vom 2024-11-07
  https://access.redhat.com/errata/RHSA-2024:9018
• Red Hat Security Advisory RHSA-2024:9019 vom 2024-11-07
  https://access.redhat.com/errata/RHSA-2024:9019
• Rocky Linux Security Advisory RLSA-2024:8793 vom 2024-11-08
  https://errata.build.resf.org/RLSA-2024:8793
• Rocky Linux Security Advisory RLSA-2024:8726 vom 2024-11-08
  https://errata.build.resf.org/RLSA-2024:8726
• Oracle Linux Security Advisory ELSA-2024-8727 vom 2024-11-09
  https://linux.oracle.com/errata/ELSA-2024-8727.html
• Rocky Linux Security Advisory RLSA-2024:8790 vom 2024-11-08
  https://errata.build.resf.org/RLSA-2024:8790
• openSUSE Security Update OPENSUSE-SU-2024:14483-1 vom 2024-11-12
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/7YVKQ6WWYB42JWYJ7PEQFEGG53I2RDWV/
• Red Hat Security Advisory RHSA-2024:9554 vom 2024-11-14
  https://rhn.redhat.com/errata/RHSA-2024:9554.html
• Amazon Linux Security Advisory ALASFIREFOX-2024-032 vom 2024-11-13
  https://alas.aws.amazon.com/AL2/ALASFIREFOX-2024-032.html
• Red Hat Security Advisory RHSA-2024:9552 vom 2024-11-13
  https://access.redhat.com/errata/RHSA-2024:9552
• Oracle Linux Security Advisory ELSA-2024-9552 vom 2024-11-19
  https://linux.oracle.com/errata/ELSA-2024-9552.html
• Oracle Linux Security Advisory ELSA-2024-9554 vom 2024-11-19
  https://linux.oracle.com/errata/ELSA-2024-9554.html
• SUSE Security Update SUSE-SU-2024:4050-1 vom 2024-11-25
  https://lists.suse.com/pipermail/sle-security-updates/2024-November/019842.html
• SUSE Security Update SUSE-SU-2024:4050-1 vom 2024-11-25
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/HD7VY4CJZNLYWT74XDD2HN4OERQPRMJ4/
• Gentoo Linux Security Advisory GLSA-202412-06 vom 2024-12-07
  https://security.gentoo.org/glsa/202412-06
• openSUSE Security Update OPENSUSE-SU-2024:14572-1 vom 2024-12-13
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/3HI2RC7AJAHY74Q6MK7GNGWU6TITB22V/
• Gentoo Linux Security Advisory GLSA-202501-10 vom 2025-01-23
  https://security.gentoo.org/glsa/202501-10
• Amazon Linux Security Advisory ALAS-2025-2765 vom 2025-02-25
  https://alas.aws.amazon.com/AL2/ALAS-2025-2765.html
• Amazon Linux Security Advisory ALASFIREFOX-2025-034 vom 2025-02-25
  https://alas.aws.amazon.com/AL2/ALASFIREFOX-2025-034.html
• Amazon Linux Security Advisory ALASFIREFOX-2025-035 vom 2025-03-01
  https://alas.aws.amazon.com/AL2/ALASFIREFOX-2025-035.html
• Amazon Linux Security Advisory ALAS-2025-2789 vom 2025-03-07
  https://alas.aws.amazon.com/AL2/ALAS-2025-2789.html
• Gentoo Linux Security Advisory GLSA-202505-08 vom 2025-05-14
  https://security.gentoo.org/glsa/202505-08
• Ubuntu Security Notice USN-7991-1 vom 2026-02-03
  https://ubuntu.com/security/notices/USN-7991-1