CVE-2024-4367

mozilla firefox, mozilla thunderbird, debian linux +1 lainnya

TLP:CLEAR

csirt@kutim:~/threat-intel/cve/CVE-2024-4367

Katalog CVE

CVSS 8.8 · High EPSS 70,7%

Kerentanan Improper Check for Unusual or Exceptional Conditions pada mozilla firefox, mozilla thunderbird +2 lainnya. Skor CVSS 3.1 8.8 (High) menurut NVD.

Deskripsi (NVD)

A type check was missing when handling fonts in PDF.js, which would allow arbitrary JavaScript execution in the PDF.js context. This vulnerability affects Firefox < 126, Firefox ESR < 115.11, and Thunderbird < 115.11.

Rincian

Terbit di NVD
14 Mei 2024
Terakhir diubah
17 Juni 2026
Status NVD
Modified
CVSS 3.1
8.8 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-754: Improper Check for Unusual or Exceptional Conditions
EPSS (30 hari)
70,7% peluang dieksploitasi; lebih tinggi dari 99,3% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
mozilla firefox Semua versi sebelum 115.11.0
mozilla firefox Semua versi sebelum 126.0
mozilla thunderbird Semua versi sebelum 115.11.0
debian debian linux Versi 10.0
open-xchange open-xchange appsuite frontend Semua versi sebelum 7.10.6
open-xchange open-xchange appsuite frontend Versi 7.10.6
open-xchange open-xchange appsuite frontend Versi 7.10.6 revision10
open-xchange open-xchange appsuite frontend Versi 7.10.6 revision11
open-xchange open-xchange appsuite frontend Versi 7.10.6 revision12
open-xchange open-xchange appsuite frontend Versi 7.10.6 revision13
open-xchange open-xchange appsuite frontend Versi 7.10.6 revision14
open-xchange open-xchange appsuite frontend Versi 7.10.6 revision15
open-xchange open-xchange appsuite frontend Versi 7.10.6 revision16
open-xchange open-xchange appsuite frontend Versi 7.10.6 revision17
open-xchange open-xchange appsuite frontend Versi 7.10.6 revision18
open-xchange open-xchange appsuite frontend Versi 7.10.6 revision19
open-xchange open-xchange appsuite frontend Versi 7.10.6 revision20
open-xchange open-xchange appsuite frontend Versi 7.10.6 revision21
open-xchange open-xchange appsuite frontend Versi 7.10.6 revision22
open-xchange open-xchange appsuite frontend Versi 7.10.6 revision23
open-xchange open-xchange appsuite frontend Versi 7.10.6 revision24
open-xchange open-xchange appsuite frontend Versi 7.10.6 revision25
open-xchange open-xchange appsuite frontend Versi 7.10.6 revision26
open-xchange open-xchange appsuite frontend Versi 7.10.6 revision27
open-xchange open-xchange appsuite frontend Versi 7.10.6 revision28
open-xchange open-xchange appsuite frontend Versi 7.10.6 revision29
open-xchange open-xchange appsuite frontend Versi 7.10.6 revision3
open-xchange open-xchange appsuite frontend Versi 7.10.6 revision30
open-xchange open-xchange appsuite frontend Versi 7.10.6 revision31
open-xchange open-xchange appsuite frontend Versi 7.10.6 revision32
open-xchange open-xchange appsuite frontend Versi 7.10.6 revision33
open-xchange open-xchange appsuite frontend Versi 7.10.6 revision34
open-xchange open-xchange appsuite frontend Versi 7.10.6 revision35
open-xchange open-xchange appsuite frontend Versi 7.10.6 revision36
open-xchange open-xchange appsuite frontend Versi 7.10.6 revision37
open-xchange open-xchange appsuite frontend Versi 7.10.6 revision38
open-xchange open-xchange appsuite frontend Versi 7.10.6 revision39
open-xchange open-xchange appsuite frontend Versi 7.10.6 revision4
open-xchange open-xchange appsuite frontend Versi 7.10.6 revision40
open-xchange open-xchange appsuite frontend Versi 7.10.6 revision41
open-xchange open-xchange appsuite frontend Versi 7.10.6 revision42
open-xchange open-xchange appsuite frontend Versi 7.10.6 revision43
open-xchange open-xchange appsuite frontend Versi 7.10.6 revision44
open-xchange open-xchange appsuite frontend Versi 7.10.6 revision5
open-xchange open-xchange appsuite frontend Versi 7.10.6 revision6
open-xchange open-xchange appsuite frontend Versi 7.10.6 revision7
open-xchange open-xchange appsuite frontend Versi 7.10.6 revision8
open-xchange open-xchange appsuite frontend Versi 7.10.6 revision9

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:11 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.