Tom Schuster

Memory safety bugs exist that exhibit evidence of memory corruption. These issues could potentially be exploited to execute arbitrary code.

Memory safety bugs involving memory corruption may allow the execution of arbitrary code.

Memory safety bugs involving memory corruption could allow an attacker to run arbitrary code.

Memory safety bugs involving memory corruption could allow an attacker to run arbitrary code.

Memory safety bugs involving memory corruption may allow an attacker to execute arbitrary code.

Memory safety bugs exist that exhibit evidence of memory corruption, which could potentially be exploited to execute arbitrary code.

Memory safety bugs involving memory corruption could allow an attacker to run arbitrary code.

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 149.0.2 Firefox ESR versions prior to 140.9.1 Thunderbird versions prior to 149.0.2 Thunderbird ESR versions prior to 140.9.1 Description Memory safety bugs are present in Firefox and Thunderbird, potentially leading to memory corruption and arbitrary code execution. These bugs were identified in versions ESR 140.9.0, 140.9.0, 149.0.1, and 149.0.1. Recommendations Update Firefox to version 149.0.2 or later. Update Firefox ESR to version 140.9.1 or later. Update Thunderbird to version 149.0.2 or later. Update Thunderbird ESR to version 140.9.1 or later.

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 149.0.2 Firefox ESR versions prior to 115.34.1 and 140.9.1 Thunderbird versions prior to 149.0.2 and 140.9.1 Description Memory safety bugs are present in Firefox and Thunderbird, with some showing evidence of memory corruption. These bugs could potentially be exploited to run arbitrary code. Recommendations Update Firefox to version 149.0.2 or later. Update Firefox ESR to version 115.34.1 or 140.9.1 or later. Update Thunderbird to version 149.0.2 or later. Update Thunderbird ESR to version 140.9.1 or later.

Memory safety issues exist in Firefox 148 and Thunderbird 148. These bugs demonstrate evidence of memory corruption, and it is presumed that, with sufficient effort, they could potentially be exploited to execute arbitrary code.

The software contains memory safety bugs. Some of these bugs exhibited evidence of memory corruption, and it is presumed that, with sufficient effort, they could potentially be exploited to execute arbitrary code.

The software contains memory safety bugs, some of which demonstrate evidence of memory corruption. It is presumed that, with sufficient effort, these bugs could potentially be exploited to execute arbitrary code.

The `username:password` component was not properly removed from URLs within Content Security Policy (CSP) reports, potentially exposing HTTP Basic Authentication credentials.

The issue is related to inadequate exception handling in Mozilla Firefox, which can be exploited by a remote attacker to cause a denial of service. Specifically, `TypedArrays` can be fallible and lack proper exception handling, potentially leading to abuse in other APIs that expect `TypedArrays` to always succeed.

The issue arises from the Firefox GTK wrapper code's use of text/plain for drag data, which GTK treats as being dragged if the text/plain MIME contains file URLs. This allows a website to arbitrarily read a file via a call to `DataTransfer.setData`.

Memory safety bugs were reported, showing evidence of memory corruption. It is presumed that with enough effort, some of these bugs could be exploited to run arbitrary code.