2023-09-29 16:00:29 +00:00

44 lines
1.7 KiB
JSON

{
"id": "CVE-2023-5169",
"sourceIdentifier": "security@mozilla.org",
"published": "2023-09-27T15:19:42.127",
"lastModified": "2023-09-29T15:15:10.350",
"vulnStatus": "Awaiting Analysis",
"descriptions": [
{
"lang": "en",
"value": "A compromised content process could have provided malicious data in a `PathRecording` resulting in an out-of-bounds write, leading to a potentially exploitable crash in a privileged process. This vulnerability affects Firefox < 118, Firefox ESR < 115.3, and Thunderbird < 115.3."
},
{
"lang": "es",
"value": "Un proceso de contenido comprometido podr\u00eda haber proporcionado datos maliciosos en un `PathRecording`, lo que habr\u00eda resultado en una escritura fuera de los l\u00edmites, lo que habr\u00eda provocado una falla potencialmente explotable en un proceso privilegiado. Esta vulnerabilidad afecta a Firefox &lt; 118, Firefox ESR &lt; 115.3 y Thunderbird &lt; 115.3."
}
],
"metrics": {},
"references": [
{
"url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1846685",
"source": "security@mozilla.org"
},
{
"url": "https://lists.debian.org/debian-lts-announce/2023/09/msg00034.html",
"source": "security@mozilla.org"
},
{
"url": "https://www.debian.org/security/2023/dsa-5506",
"source": "security@mozilla.org"
},
{
"url": "https://www.mozilla.org/security/advisories/mfsa2023-41/",
"source": "security@mozilla.org"
},
{
"url": "https://www.mozilla.org/security/advisories/mfsa2023-42/",
"source": "security@mozilla.org"
},
{
"url": "https://www.mozilla.org/security/advisories/mfsa2023-43/",
"source": "security@mozilla.org"
}
]
}