{
  "id": "CVE-2024-4367",
  "sourceIdentifier": "security@mozilla.org",
  "published": "2024-05-14T18:15:12.467",
  "lastModified": "2024-06-10T17:16:33.380",
  "vulnStatus": "Awaiting Analysis",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "A type check was missing when handling fonts in PDF.js, which would allow arbitrary JavaScript execution in the PDF.js context. This vulnerability affects Firefox < 126, Firefox ESR < 115.11, and Thunderbird < 115.11."
    },
    {
      "lang": "es",
      "value": "Faltaba una verificaci\u00f3n de tipo al manejar fuentes en PDF.js, lo que permitir\u00eda la ejecuci\u00f3n arbitraria de JavaScript en el contexto de PDF.js. Esta vulnerabilidad afecta a Firefox &lt; 126, Firefox ESR &lt; 115.11 y Thunderbird &lt; 115.11."
    }
  ],
  "metrics": {},
  "references": [
    {
      "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1893645",
      "source": "security@mozilla.org"
    },
    {
      "url": "https://lists.debian.org/debian-lts-announce/2024/05/msg00010.html",
      "source": "security@mozilla.org"
    },
    {
      "url": "https://lists.debian.org/debian-lts-announce/2024/05/msg00012.html",
      "source": "security@mozilla.org"
    },
    {
      "url": "https://www.mozilla.org/security/advisories/mfsa2024-21/",
      "source": "security@mozilla.org"
    },
    {
      "url": "https://www.mozilla.org/security/advisories/mfsa2024-22/",
      "source": "security@mozilla.org"
    },
    {
      "url": "https://www.mozilla.org/security/advisories/mfsa2024-23/",
      "source": "security@mozilla.org"
    }
  ]
}