CVE-2024-2605 — Mozilla Firefox vulnerability
11 documents9 sources
Severity
5.9MEDIUMNVD
EPSS
0.3%
top 44.88%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedMar 19
Latest updateApr 17
Description
An attacker could have leveraged the Windows Error Reporter to run arbitrary code on the system escaping the sandbox. *Note:* This issue only affected Windows operating systems. Other operating systems are unaffected. This vulnerability affects Firefox < 124, Firefox ESR < 115.9, and Thunderbird < 115.9.
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:NExploitability: 2.2 | Impact: 3.6
Affected Packages5 packages
🔴Vulnerability Details
3GHSA▶
GHSA-pwwp-85rf-2286: An attacker could have leveraged the Windows Error Reporter to run arbitrary code on the system escaping the sandbox↗2024-03-19
CVEList▶
CVE-2024-2605: An attacker could have leveraged the Windows Error Reporter to run arbitrary code on the system escaping the sandbox↗2024-03-19
OSV▶
CVE-2024-2605: An attacker could have leveraged the Windows Error Reporter to run arbitrary code on the system escaping the sandbox↗2024-03-19
📋Vendor Advisories
6Microsoft▶
An attacker could have leveraged the Windows Error Reporter to run arbitrary code on the system escaping the sandbox. *Note:* This issue only affected Windows operating systems. Other operating system↗2024-03-12
Debian▶
CVE-2024-2605: firefox - An attacker could have leveraged the Windows Error Reporter to run arbitrary cod...↗2024