CVE-2023-25752
בינונית 6.5
תיאור (מקור, אנגלית)
When accessing throttled streams, the count of available bytes needed to be checked in the calling function to be within bounds. This may have lead future code to be incorrect and vulnerable. This vulnerability affects Firefox < 111, Firefox ESR < 102.9, and Thunderbird < 102.9.
מדדים
- CVSS 3.1
-
6.5 (MEDIUM)
מקור הציון: NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N - EPSS — סבירות ניצול
- 1% (אחוזון 000) נכון ל-24/10/2026
מוצרים מושפעים
mozilla: firefox; mozilla: firefox esr; mozilla: thunderbird
קישורים
- https://bugzilla.mozilla.org/show_bug.cgi?id=1811627 Issue TrackingPermissions RequiredVendor Advisory
- https://www.mozilla.org/security/advisories/mfsa2023-09/ Vendor Advisory
- https://www.mozilla.org/security/advisories/mfsa2023-10/ Vendor Advisory
- https://www.mozilla.org/security/advisories/mfsa2023-11/ Vendor Advisory
- https://bugzilla.mozilla.org/show_bug.cgi?id=1811627 Issue TrackingPermissions RequiredVendor Advisory
- https://www.mozilla.org/security/advisories/mfsa2023-09/ Vendor Advisory
- https://www.mozilla.org/security/advisories/mfsa2023-10/ Vendor Advisory
- https://www.mozilla.org/security/advisories/mfsa2023-11/ Vendor Advisory