Integer overflow in the Networking: JAR component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11.
The flaw consists of an integer overflow in the component responsible for handling network resources in JAR (Java Archive) format. Integer value overflow can lead to incorrect calculations regarding buffer sizes or memory pointers, which can then be exploited by an attacker to execute malicious code. The attack requires no authentication or user interaction, and the attack vector is network-based.
An attacker can gain full control over system confidentiality, integrity, and availability, including potentially executing arbitrary code (RCE) in the context of the vulnerable application.
Software should be updated to Firefox 151, Firefox ESR 140.11, Thunderbird 151, or Thunderbird 140.11, in which the vulnerability has been fixed.
Mozilla Firefox versions before 151 and Firefox ESR versions before 140.11, Mozilla Thunderbird versions before 151 and Thunderbird ESR versions before 140.11.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HMozilla Firefox
APPMozilla< 140.11.0< 151.0.0Mozilla Thunderbird
APPMozilla< 140.11< 151.0.0
Related vulnerabilities
Use-after-free w Animation timelines Firefox/Thunderbird — RCE
An unexpected message in the WebGPU IPC framework could lead to a use-after-free and exploitable sandbox escap...
Insufficient vetting of parameters passed with the Prompt:Open IPC message between child and parent processes ...
Mozilla Firefox 3.5.x through 3.5.14 and 3.6.x through 3.6.11, Thunderbird 3.1.6 before 3.1.6 and 3.0.x before...
Memory safety bugs present in Firefox 152.0.3. Some of these bugs showed evidence of memory corruption and we ...