CVE-2023-32214
published 2023-06-19CVE-2023-32214: Protocol handlers `ms-cxh` and `ms-cxh-full` could have been leveraged to trigger a denial of service. *Note: This attack only affects Windows. Other operating…
PriorityP336high7.5CVSS 3.1
AVNACLPRNUINSUCNINAH
EPSS
0.92%
56.2th percentile
Protocol handlers `ms-cxh` and `ms-cxh-full` could have been leveraged to trigger a denial of service.
*Note: This attack only affects Windows. Other operating systems are not affected.* This vulnerability affects Firefox < 113, Firefox ESR < 102.11, and Thunderbird < 102.11.
Affected
10 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | firefox | — | — |
| debian | firefox-esr | — | — |
| debian | thunderbird | — | — |
| mozilla | firefox | < 113.0 | 113.0 |
| mozilla | firefox | — | — |
| mozilla | firefox | >= unspecified < 113 | 113 |
| mozilla | firefox_esr | < 102.11 | 102.11 |
| mozilla | firefox_esr | >= unspecified < 102.11 | 102.11 |
| mozilla | thunderbird | < 102.11 | 102.11 |
| mozilla | thunderbird | >= unspecified < 102.11 | 102.11 |
CVSS provenance
nvdv3.17.5HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
vendor_debian7.5LOW
vendor_redhat7.5HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
Mozilla: Potential DoS via exposed protocol handlers
vendor_redhat·2023-05-09·CVSS 7.5
CVE-2023-32214 [HIGH] CWE-400 Mozilla: Potential DoS via exposed protocol handlers
Mozilla: Potential DoS via exposed protocol handlers
Protocol handlers `ms-cxh` and `ms-cxh-full` could have been leveraged to trigger a denial of service.
*Note: This attack only affects Windows. Other operating systems are not affected.* This vulnerability affects Firefox < 113, Firefox ESR < 102.11, and Thunderbird < 102.11.
A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes the issue of the protocol handlers, `ms-cxh` and `ms-cxh-full` could be leveraged to trigger a denial of service. Note: This attack only affects Windows. Other operating systems are not affected.
Statement: Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.
Package: firefox (Red Hat Enterprise Linux 6) - Not affected
P
Debian
CVE-2023-32214: firefox - Protocol handlers `ms-cxh` and `ms-cxh-full` could have been leveraged to trigge...
vendor_debian·2023·CVSS 7.5
CVE-2023-32214 [HIGH] CVE-2023-32214: firefox - Protocol handlers `ms-cxh` and `ms-cxh-full` could have been leveraged to trigge...
Protocol handlers `ms-cxh` and `ms-cxh-full` could have been leveraged to trigger a denial of service. *Note: This attack only affects Windows. Other operating systems are not affected.* This vulnerability affects Firefox < 113, Firefox ESR < 102.11, and Thunderbird < 102.11.
Scope: local
sid: resolved
Mozilla
Mozilla Foundation Security Advisory 2023-17: CVE-2023-32214
vendor_mozilla·CVSS 7.5
CVE-2023-32214 [HIGH] Mozilla Foundation Security Advisory 2023-17: CVE-2023-32214
Mozilla Foundation Security Advisory 2023-17
CVE: CVE-2023-32214
Product: Firefox ESR
Impact: high
Fixed in: Firefox ESR 102.11
Mozilla
Mozilla Foundation Security Advisory 2023-16: CVE-2023-32214
vendor_mozilla·CVSS 7.5
CVE-2023-32214 [HIGH] Mozilla Foundation Security Advisory 2023-16: CVE-2023-32214
Mozilla Foundation Security Advisory 2023-16
CVE: CVE-2023-32214
Product: Firefox
Impact: high
Fixed in: Firefox 113
Mozilla
Mozilla Foundation Security Advisory 2023-18: CVE-2023-32214
vendor_mozilla·CVSS 7.5
CVE-2023-32214 [HIGH] Mozilla Foundation Security Advisory 2023-18: CVE-2023-32214
Mozilla Foundation Security Advisory 2023-18
CVE: CVE-2023-32214
Product: Thunderbird
Impact: high
Fixed in: Thunderbird 102.11
GHSA
GHSA-9cm9-63jc-g4wg: Protocol handlers `ms-cxh` and `ms-cxh-full` could have been leveraged to trigger a denial of service
ghsa_unreviewed·2023-06-19
CVE-2023-32214 [HIGH] GHSA-9cm9-63jc-g4wg: Protocol handlers `ms-cxh` and `ms-cxh-full` could have been leveraged to trigger a denial of service
Protocol handlers `ms-cxh` and `ms-cxh-full` could have been leveraged to trigger a denial of service.
*Note: This attack only affects Windows. Other operating systems are not affected.* This vulnerability affects Firefox < 113, Firefox ESR < 102.11, and Thunderbird < 102.11.
No detection rules found.
No public exploits indexed.
https://bugzilla.mozilla.org/show_bug.cgi?id=1828716https://security.gentoo.org/glsa/202312-03https://security.gentoo.org/glsa/202401-10https://www.mozilla.org/security/advisories/mfsa2023-16/https://www.mozilla.org/security/advisories/mfsa2023-17/https://www.mozilla.org/security/advisories/mfsa2023-18/https://bugzilla.mozilla.org/show_bug.cgi?id=1828716https://security.gentoo.org/glsa/202312-03https://security.gentoo.org/glsa/202401-10https://www.mozilla.org/security/advisories/mfsa2023-16/https://www.mozilla.org/security/advisories/mfsa2023-17/https://www.mozilla.org/security/advisories/mfsa2023-18/
2023-06-19
Published