CVE-2023-4576

Integer Overflow in RecordedSourceSurfaceCreation

EPSS 0.7%

On Windows, an integer overflow could occur in `RecordedSourceSurfaceCreation` which resulted in a heap buffer overflow potentially leaking sensitive data that could have led to a sandbox escape. *This bug only affects Firefox on Windows. Other operating systems are unaffected.* This vulnerability affects Firefox < 117, Firefox ESR < 102.15, Firefox ESR < 115.2, Thunderbird < 102.15, and Thunderbird < 115.2.

Produtos afetados

Mozilla · Firefox Mozilla · Firefox ESR Mozilla · Thunderbird

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

https://bugzilla.mozilla.org/show_bug.cgi?id=1846694 https://www.mozilla.org/security/advisories/mfsa2023-34/https://www.mozilla.org/security/advisories/mfsa2023-35/https://www.mozilla.org/security/advisories/mfsa2023-36/https://www.mozilla.org/security/advisories/mfsa2023-37/https://www.mozilla.org/security/advisories/mfsa2023-38/