CVE-2023-1945

Katalog CVE

CVSS 6.5 · Medium EPSS 0,64%

Kerentanan Out-of-bounds Write pada mozilla firefox esr, mozilla thunderbird. Skor CVSS 3.1 6.5 (Medium) menurut NVD.

Deskripsi (NVD)

Unexpected data returned from the Safe Browsing API could have led to memory corruption and a potentially exploitable crash. This vulnerability affects Thunderbird < 102.10 and Firefox ESR < 102.10.

Rincian

Terbit di NVD

2 Juni 2023

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

6.5 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-787: Out-of-bounds Write

EPSS (30 hari)

0,64% peluang dieksploitasi; lebih tinggi dari 49,5% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://bugzilla.mozilla.org/show_bug.cgi?id=1777588 issue tracking · permissions required · advisory vendor
• https://www.mozilla.org/security/advisories/mfsa2023-14/ advisory vendor
• https://www.mozilla.org/security/advisories/mfsa2023-15/ advisory vendor