Tom Ritter

**Name of the Vulnerable Software and Affected Versions** Firefox versions prior to 149 Firefox ESR versions prior to 115.34 Firefox ESR versions prior to 140.9 Thunderbird versions prior to 149 Thunderbird versions prior to 140.9 **Description** A sandbox escape issue exists in the Responsive Design Mode component. This allows a malicious actor to potentially bypass security restrictions. **Recommendations** Update Firefox to version 149 or later. Update Firefox ESR to version 115.34 or later. Update Firefox ESR to version 140.9 or later. Update Thunderbird to version 149 or later. Update Thunderbird to version 140.9 or later.

**Name of the Vulnerable Software and Affected Versions** Firefox versions prior to 115 Firefox ESR versions prior to 102.13 Thunderbird versions prior to 102.13 **Description** The issue is related to memory safety bugs, which have shown evidence of memory corruption. It is presumed that with sufficient effort, some of these bugs could be exploited to run arbitrary code. The vulnerability is associated with a buffer overflow in memory, allowing a remote attacker to potentially execute arbitrary code. **Recommendations** For Firefox versions prior to 115, update to version 115 or later. For Firefox ESR versions prior to 102.13, update to version 102.13 or later. For Thunderbird versions prior to 102.13, update to version 102.13 or later.

**Name of the Vulnerable Software and Affected Versions** Firefox versions prior to 102 **Description** A security issue exists where a sandboxed iframe with the `allow-top-navigation-by-user-activation` attribute can still process redirect headers to external protocols, potentially prompting the user. **Recommendations** For Firefox versions prior to 102, update to version 102 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Firefox versions prior to 100 Firefox ESR versions prior to 91.9 Thunderbird versions prior to 91.9 **Description** The issue is related to memory safety bugs and buffer overflow when processing HTML content, which could allow a remote attacker to execute arbitrary code or cause a denial of service with a specially crafted web page. Some of these bugs showed evidence of memory corruption. **Recommendations** For Firefox versions prior to 100, update to version 100 or later. For Firefox ESR versions prior to 91.9, update to version 91.9 or later. For Thunderbird versions prior to 91.9, update to version 91.9 or later.

Name of the Vulnerable Software and Affected Versions: Firefox versions prior to 87 Description: The issue allows an attacker to enable the Devtools remote debugging feature unnoticed by the user, potentially by altering specific about:config values, such as those modified by malware running on the user's computer. This could enable a remote attacker, who can make a direct network connection to the victim, to monitor the user's browsing activity and plaintext network traffic. A visual cue has been introduced for Devtools when it has an open network socket to address this issue. Recommendations: For Firefox versions prior to 87, update to version 87 or later to resolve the issue. As a temporary workaround, consider disabling the Devtools remote debugging feature until the update can be applied. Restrict access to the about:config values to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Firefox versions prior to 69 Firefox ESR versions prior to 68.1 **Description** The issue is related to a buffer overflow due to unchecked input size, which could allow a remote attacker to gain unauthorized access to information and compromise its integrity and availability. There are memory safety bugs present, some of which show evidence of memory corruption, and it is presumed that these could be exploited to run arbitrary code with enough effort. **Recommendations** For Firefox versions prior to 69, update to version 69 or later to resolve the issue. For Firefox ESR versions prior to 68.1, update to version 68.1 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Firefox versions prior to 56 Firefox ESR versions prior to 52.4 Thunderbird versions prior to 52.4 **Description** The issue is related to memory safety bugs, including evidence of memory corruption, which could potentially be exploited to run arbitrary code. This is due to a buffer overflow in memory, allowing a remote attacker to execute arbitrary code. **Recommendations** For Firefox versions prior to 56, update to version 56 or later. For Firefox ESR versions prior to 52.4, update to version 52.4 or later. For Thunderbird versions prior to 52.4, update to version 52.4 or later.

**Name of the Vulnerable Software and Affected Versions** Verizon Wireless Network Extender SCS-26UC4 (affected versions not specified) **Description** The issue allows physically proximate attackers to obtain root access by connecting a crafted HDMI cable and using a sys session to modify the `ramboot` environment variable. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Verizon Wireless Network Extender SCS-2U01 **Description** The issue concerns a hardcoded password for the `root` account in the device, making it easier for attackers with physical access to obtain administrative access by leveraging a login prompt. **Recommendations** For Verizon Wireless Network Extender SCS-2U01, consider changing the hardcoded password for the `root` account to a unique and strong password to prevent unauthorized access. As a temporary workaround, restrict physical access to the device to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Verizon Wireless Network Extender SCS-2U01 (affected versions not specified) **Description** The issue allows physically proximate attackers to bypass the intended boot process and obtain a login prompt by connecting a crafted HDMI cable and sending a SysReq interrupt. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.