CVE-2024-10941 — Mozilla Firefox vulnerability

Vendor	Product	Version range	Fixed in
debian	firefox	< firefox 126.0-1 (sid)	firefox 126.0-1 (sid)
mozilla	firefox	< 126.0	126.0
mozilla	firefox	—	—
mozilla	firefox	>= 0 < 126.0+build2-0ubuntu0.20.04.1	126.0+build2-0ubuntu0.20.04.1
mozilla	firefox	>= unspecified < 126	126

Red Hat

firefox: Browser crash from invalid URI

vendor_redhat·2024-11-06·CVSS 6.5

CVE-2024-10941 [MEDIUM] firefox: Browser crash from invalid URI firefox: Browser crash from invalid URI A malicious website could have included an iframe with an malformed URI resulting in a non-exploitable browser crash. This vulnerability affects Firefox < 126. A flaw was found in Mozilla. The Mozilla Foundation's Security Advisory describes the issue: A malicious website could have included an iframe with a malformed URI, resulting in a non-exploitable browser crash. Statement: Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory. Package: firefox (Red Hat Enterprise Linux 6) - Fix deferred Package: firefox (Red Hat Enterprise Linux 7) - Fix deferred Package: firefox (Red Hat Enterprise Linux 8) - Fix deferred Package: firefox (Red Hat Enterprise Linux 9) - Fix deferred Package: f

Debian

CVE-2024-10941: firefox - A malicious website could have included an iframe with an malformed URI resultin...

vendor_debian·2024·CVSS 6.5

CVE-2024-10941 [MEDIUM] CVE-2024-10941: firefox - A malicious website could have included an iframe with an malformed URI resultin... A malicious website could have included an iframe with an malformed URI resulting in a non-exploitable browser crash. This vulnerability affects Firefox < 126. Scope: local sid: resolved (fixed in 126.0-1)

Mozilla

Mozilla Foundation Security Advisory 2024-21: CVE-2024-10941

vendor_mozilla·CVSS 6.5

CVE-2024-10941 [MEDIUM] Mozilla Foundation Security Advisory 2024-21: CVE-2024-10941 Mozilla Foundation Security Advisory 2024-21 CVE: CVE-2024-10941 Product: Firefox Impact: moderate Fixed in: Firefox 126

GHSA

GHSA-8w77-hpx9-8fm3: A malicious website could have included an iframe with an malformed URI resulting in a non-exploitable browser crash

ghsa_unreviewed·2024-11-06

CVE-2024-10941 [MEDIUM] CWE-86 GHSA-8w77-hpx9-8fm3: A malicious website could have included an iframe with an malformed URI resulting in a non-exploitable browser crash A malicious website could have included an iframe with an malformed URI resulting in a non-exploitable browser crash. This vulnerability affects Firefox < 126.

OSV

CVE-2024-10941: A malicious website could have included an iframe with an malformed URI resulting in a non-exploitable browser crash

osv·2024-11-06·CVSS 6.5

CVE-2024-10941 [MEDIUM] CVE-2024-10941: A malicious website could have included an iframe with an malformed URI resulting in a non-exploitable browser crash A malicious website could have included an iframe with an malformed URI resulting in a non-exploitable browser crash. This vulnerability affects Firefox < 126.

CVE-2024-10941: A malicious website could have included an iframe with an malformed URI resulting in a non-exploitable browser crash. This vulnerability affects Firefox < 126.

Affected

CVSS provenance