Skip to content
OpenAdvisories
Critical · 9.8 CVE-2024-11693 EUVD-2024-33959GHSA-qxf6-g9x3-8w74

The executable file warning was not presented when downloading .library-ms files. *Note: This issue only affected Windows operating systems…

Published Nov 26, 2024 · Updated Nov 27, 2024 · Assigned by mozilla

Description

The executable file warning was not presented when downloading .library-ms files.
*Note: This issue only affected Windows operating systems. Other operating systems are unaffected.* This vulnerability affects Firefox < 133, Firefox ESR < 128.5, Thunderbird < 133, and Thunderbird < 128.5.

Affected products

VendorProductAffectedFixed
Mozilla Firefox unspecified – < 133 133
Mozilla Firefox ESR unspecified – < 128.5 128.5
Mozilla Thunderbird unspecified – < 133, unspecified – < 128.5 133

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
SLES 15 SP6 MozillaFirefox 128.5.0-150200.152.161.1 SUSE-SU-2024:4086-1
SLES 15 SP6 MozillaThunderbird 128.5.0-150200.8.191.1 SUSE-SU-2024:4148-1
SLES 15 SP5 MozillaFirefox 128.5.0-150200.152.161.1 SUSE-SU-2024:4086-1
SLES 15 SP5 MozillaThunderbird 128.5.0-150200.8.191.1 SUSE-SU-2024:4148-1
SLES 15 SP4 MozillaFirefox 128.5.0-150200.152.161.1 SUSE-SU-2024:4086-1
SLES 15 SP3 MozillaFirefox 128.5.0-150200.152.161.1 SUSE-SU-2024:4086-1
SLES 15 SP2 MozillaFirefox 128.5.0-150200.152.161.1 SUSE-SU-2024:4086-1
Show 8 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SLES 12 SP5 MozillaFirefox 128.5.0-112.237.2 SUSE-SU-2024:4074-1
SLES for SAP 15 SP4 MozillaFirefox 128.5.0-150200.152.161.1 SUSE-SU-2024:4086-1
SLES for SAP 15 SP3 MozillaFirefox 128.5.0-150200.152.161.1 SUSE-SU-2024:4086-1
SLES for SAP 15 SP2 MozillaFirefox 128.5.0-150200.152.161.1 SUSE-SU-2024:4086-1
SLE HPC 15 SP4 MozillaFirefox 128.5.0-150200.152.161.1 SUSE-SU-2024:4086-1
SLE HPC 15 SP3 MozillaFirefox 128.5.0-150200.152.161.1 SUSE-SU-2024:4086-1
SLE HPC 15 SP2 MozillaFirefox 128.5.0-150200.152.161.1 SUSE-SU-2024:4086-1
SUSE Enterprise Storage 7.1 MozillaFirefox 128.5.0-150200.152.161.1 SUSE-SU-2024:4086-1
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed MozillaFirefox 133.0.3-1.1 openSUSE-SU-2024:14583-1
openSUSE Tumbleweed MozillaThunderbird 128.5.0-1.1 openSUSE-SU-2024:14533-1
openSUSE Tumbleweed firefox-esr 128.5.1-1.1 openSUSE-SU-2024:14572-1
openSUSE Leap 15.6 MozillaFirefox 128.5.0-150200.152.161.1 SUSE-SU-2024:4086-1
openSUSE Leap 15.6 MozillaThunderbird 128.5.0-150200.8.191.1 SUSE-SU-2024:4148-1
openSUSE Leap 15.5 MozillaFirefox 128.5.0-150200.152.161.1 SUSE-SU-2024:4086-1
openSUSE Leap 15.5 MozillaThunderbird 128.5.0-150200.8.191.1 SUSE-SU-2024:4148-1
ReleasePackageFixed inAdvisory
Alpine v3.23 thunderbird 128.5.0-r0 —
Alpine v3.22 thunderbird 128.5.0-r0 —
Alpine v3.21 thunderbird 128.5.0-r0 —
Alpine v3.20 thunderbird 128.5.0-r0 —

Wolfi

ReleasePackageFixed inAdvisory
Wolfi rolling firefox 133.0-r0 —

Advisories 7

References