On Windows, an integer overflow could occur in `RecordedSourceSurfaceCreation` which resulted in a heap buffer overflow potentially leaking sensitive data that could have led to a sandbox escape.
*This bug only affects Firefox on Windows. Other operating systems are unaffected.* This vulnerability affects Firefox < 117, Firefox ESR < 102.15, Firefox ESR < 115.2, Thunderbird < 102.15, and Thunderbird < 115.2.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mozilla
Published: 2023-09-11T08:00:51.770Z
Updated: 2024-08-02T07:31:06.602Z
Reserved: 2023-08-29T03:36:40.370Z
Link: CVE-2023-4576
Vulnrichment
No data.
NVD
Status : Modified
Published: 2023-09-11T09:15:09.217
Modified: 2023-09-13T11:15:10.727
Link: CVE-2023-4576
Redhat