CVE-2023-6210 (MEDIUM)

Vendor	Product	Version range	Fixed in
debian	firefox	< firefox 120.0-1 (sid)	firefox 120.0-1 (sid)
mozilla	firefox	< 120.0	120.0
mozilla	firefox	—	—
mozilla	firefox	>= 0 < 120.0+build2-0ubuntu0.20.04.1	120.0+build2-0ubuntu0.20.04.1
mozilla	firefox	>= 0 < 120.0.1+build1-0ubuntu0.20.04.1	120.0.1+build1-0ubuntu0.20.04.1
mozilla	firefox	>= unspecified < 120	120

Ubuntu

Firefox regressions

vendor_ubuntu·2023-12-04·CVSS 6.5

[MEDIUM] Firefox regressions Title: Firefox regressions Summary: USN-6509-1 caused some minor regressions in Firefox. USN-6509-1 fixed vulnerabilities in Firefox. The update introduced several minor regressions. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Multiple security issues were discovered in Firefox. If a user were tricked into opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, obtain sensitive information across domains, or execute arbitrary code. (CVE-2023-6206, CVE-2023-6210, CVE-2023-6211, CVE-2023-6212, CVE-2023-6213) It was discovered that Firefox did not properly manage memory when images were created on the canvas element. An attacker could potentially exploit this issue to obtain sensitiv

Ubuntu

Firefox vulnerabilities

vendor_ubuntu·2023-11-23·CVSS 6.5

CVE-2023-6207 [MEDIUM] Firefox vulnerabilities Title: Firefox vulnerabilities Summary: Several security issues were fixed in Firefox. Multiple security issues were discovered in Firefox. If a user were tricked into opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, obtain sensitive information across domains, or execute arbitrary code. (CVE-2023-6206, CVE-2023-6210, CVE-2023-6211, CVE-2023-6212, CVE-2023-6213) It was discovered that Firefox did not properly manage memory when images were created on the canvas element. An attacker could potentially exploit this issue to obtain sensitive information. (CVE-2023-6204) It discovered that Firefox incorrectly handled certain memory when using a MessagePort. An attacker could potentially exploit this issue to cause a denial of ser

Debian

CVE-2023-6210: firefox - When an https: web page created a pop-up from a "javascript:" URL, that pop-up w...

vendor_debian·2023·CVSS 6.5

CVE-2023-6210 [MEDIUM] CVE-2023-6210: firefox - When an https: web page created a pop-up from a "javascript:" URL, that pop-up w... When an https: web page created a pop-up from a "javascript:" URL, that pop-up was incorrectly allowed to load blockable content such as iframes from insecure http: URLs This vulnerability affects Firefox < 120. Scope: local sid: resolved (fixed in 120.0-1)

Mozilla

Mozilla Foundation Security Advisory 2023-49: CVE-2023-6210

vendor_mozilla·CVSS 6.5

CVE-2023-6210 [MEDIUM] Mozilla Foundation Security Advisory 2023-49: CVE-2023-6210 Mozilla Foundation Security Advisory 2023-49 CVE: CVE-2023-6210 Product: Firefox Impact: high Fixed in: Firefox 120

OSV

firefox regressions

osv·2023-12-04·CVSS 6.5

CVE-2023-6206 [MEDIUM] firefox regressions firefox regressions USN-6509-1 fixed vulnerabilities in Firefox. The update introduced several minor regressions. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Multiple security issues were discovered in Firefox. If a user were tricked into opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, obtain sensitive information across domains, or execute arbitrary code. (CVE-2023-6206, CVE-2023-6210, CVE-2023-6211, CVE-2023-6212, CVE-2023-6213) It was discovered that Firefox did not properly manage memory when images were created on the canvas element. An attacker could potentially exploit this issue to obtain sensitive information. (CVE-2023-6204) It discovered that Firefox incorrectly

OSV

firefox vulnerabilities

osv·2023-11-23·CVSS 6.5

CVE-2023-6206 [MEDIUM] firefox vulnerabilities firefox vulnerabilities Multiple security issues were discovered in Firefox. If a user were tricked into opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, obtain sensitive information across domains, or execute arbitrary code. (CVE-2023-6206, CVE-2023-6210, CVE-2023-6211, CVE-2023-6212, CVE-2023-6213) It was discovered that Firefox did not properly manage memory when images were created on the canvas element. An attacker could potentially exploit this issue to obtain sensitive information. (CVE-2023-6204) It discovered that Firefox incorrectly handled certain memory when using a MessagePort. An attacker could potentially exploit this issue to cause a denial of service. (CVE-2023-6205) It discovered that Firefox incorrectly di

OSV

CVE-2023-6210: When an https: web page created a pop-up from a "javascript:" URL, that pop-up was incorrectly allowed to load blockable content such as iframes from

osv·2023-11-21·CVSS 6.5

CVE-2023-6210 [MEDIUM] CVE-2023-6210: When an https: web page created a pop-up from a "javascript:" URL, that pop-up was incorrectly allowed to load blockable content such as iframes from When an https: web page created a pop-up from a "javascript:" URL, that pop-up was incorrectly allowed to load blockable content such as iframes from insecure http: URLs This vulnerability affects Firefox < 120.

GHSA

GHSA-7mpv-6jjp-xm5c: When an https: web page created a pop-up from a "javascript:" URL, that pop-up was incorrectly allowed to load blockable content such as iframes from

ghsa_unreviewed·2023-11-21

CVE-2023-6210 [MEDIUM] GHSA-7mpv-6jjp-xm5c: When an https: web page created a pop-up from a "javascript:" URL, that pop-up was incorrectly allowed to load blockable content such as iframes from When an https: web page created a pop-up from a "javascript:" URL, that pop-up was incorrectly allowed to load blockable content such as iframes from insecure http: URLs This vulnerability affects Firefox < 120.

CVE-2023-6210: When an https: web page created a pop-up from a "javascript:" URL, that pop-up was incorrectly allowed to load blockable content such as iframes from insecure…

Affected

CVSS provenance