CVE-2024-5689 (MEDIUM)

Vendor	Product	Version range	Fixed in
debian	firefox	< firefox 127.0-1 (sid)	firefox 127.0-1 (sid)
mozilla	firefox	< 127.0	127.0
mozilla	firefox	—	—
mozilla	firefox	>= 0 < 127.0.2+build1-0ubuntu0.20.04.1	127.0.2+build1-0ubuntu0.20.04.1
mozilla	firefox	>= unspecified < 127	127

Ubuntu

Firefox vulnerabilities

vendor_ubuntu·2024-07-03·CVSS 8.1

CVE-2024-5693 [HIGH] Firefox vulnerabilities Title: Firefox vulnerabilities Summary: Several security issues were fixed in Firefox. Multiple security issues were discovered in Firefox. If a user were tricked into opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, obtain sensitive information across domains, or execute arbitrary code. (CVE-2024-5689, CVE-2024-5690, CVE-2024-5691, CVE-2024-5693, CVE-2024-5697, CVE-2024-5698, CVE-2024-5699, CVE-2024-5700, CVE-2024-5701) Lukas Bernhard discovered that Firefox did not properly manage memory during garbage collection. An attacker could potentially exploit this issue to cause a denial of service, or execute arbitrary code. (CVE-2024-5688) Lukas Bernhard discovered that Firefox did not properly manage memory in the JavaScript en

Debian

CVE-2024-5689: firefox - In addition to detecting when a user was taking a screenshot (XXX), a website wa...

vendor_debian·2024·CVSS 4.3

CVE-2024-5689 [MEDIUM] CVE-2024-5689: firefox - In addition to detecting when a user was taking a screenshot (XXX), a website wa... In addition to detecting when a user was taking a screenshot (XXX), a website was able to overlay the 'My Shots' button that appeared, and direct the user to a replica Firefox Screenshots page that could be used for phishing. This vulnerability affects Firefox < 127. Scope: local sid: resolved (fixed in 127.0-1)

Mozilla

Mozilla Foundation Security Advisory 2024-25: CVE-2024-5689

vendor_mozilla·CVSS 4.3

CVE-2024-5689 [MEDIUM] Mozilla Foundation Security Advisory 2024-25: CVE-2024-5689 Mozilla Foundation Security Advisory 2024-25 CVE: CVE-2024-5689 Product: Firefox Impact: high Fixed in: Firefox 127

OSV

firefox vulnerabilities

osv·2024-07-03·CVSS 8.1

CVE-2024-5689 [HIGH] firefox vulnerabilities firefox vulnerabilities Multiple security issues were discovered in Firefox. If a user were tricked into opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, obtain sensitive information across domains, or execute arbitrary code. (CVE-2024-5689, CVE-2024-5690, CVE-2024-5691, CVE-2024-5693, CVE-2024-5697, CVE-2024-5698, CVE-2024-5699, CVE-2024-5700, CVE-2024-5701) Lukas Bernhard discovered that Firefox did not properly manage memory during garbage collection. An attacker could potentially exploit this issue to cause a denial of service, or execute arbitrary code. (CVE-2024-5688) Lukas Bernhard discovered that Firefox did not properly manage memory in the JavaScript engine. An attacker could potentially exploit this issue to obtain

GHSA

GHSA-hx83-hmj3-pffc: In addition to detecting when a user was taking a screenshot (XXX), a website was able to overlay the 'My Shots' button that appeared, and direct the

ghsa_unreviewed·2024-06-11

CVE-2024-5689 [MEDIUM] GHSA-hx83-hmj3-pffc: In addition to detecting when a user was taking a screenshot (XXX), a website was able to overlay the 'My Shots' button that appeared, and direct the In addition to detecting when a user was taking a screenshot (XXX), a website was able to overlay the 'My Shots' button that appeared, and direct the user to a replica Firefox Screenshots page that could be used for phishing. This vulnerability affects Firefox < 127.

OSV

CVE-2024-5689: In addition to detecting when a user was taking a screenshot (XXX), a website was able to overlay the 'My Shots' button that appeared, and direct the

osv·2024-06-11·CVSS 4.3

CVE-2024-5689 [MEDIUM] CVE-2024-5689: In addition to detecting when a user was taking a screenshot (XXX), a website was able to overlay the 'My Shots' button that appeared, and direct the In addition to detecting when a user was taking a screenshot (XXX), a website was able to overlay the 'My Shots' button that appeared, and direct the user to a replica Firefox Screenshots page that could be used for phishing. This vulnerability affects Firefox < 127.

CVE-2024-5689: In addition to detecting when a user was taking a screenshot (XXX), a website was able to overlay the 'My Shots' button that appeared, and direct the user to a…

Affected

CVSS provenance