By manipulating the text in an `<input>` tag, an attacker could have caused corrupt memory leading to a potentially exploitable crash. This vulnerability affects Firefox < 127, Firefox ESR < 115.12, and Thunderbird < 115.12.
Metrics
Affected Vendors & Products
Advisories
| Source | ID | Title |
|---|---|---|
Debian DLA |
DLA-3825-1 | firefox-esr security update |
Debian DLA |
DLA-3836-1 | thunderbird security update |
Debian DSA |
DSA-5709-1 | firefox-esr security update |
Debian DSA |
DSA-5711-1 | thunderbird security update |
Ubuntu USN |
USN-6840-1 | Thunderbird vulnerabilities |
Ubuntu USN |
USN-6862-1 | Firefox vulnerabilities |
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
History
Thu, 27 Mar 2025 20:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Debian
Debian debian Linux Mozilla Mozilla firefox Mozilla thunderbird |
|
| CPEs | cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:*:*:*:*:esr:*:*:* cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:* cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:* |
|
| Vendors & Products |
Debian
Debian debian Linux Mozilla Mozilla firefox Mozilla thunderbird |
Status: PUBLISHED
Assigner: mozilla
Published:
Updated: 2024-08-01T21:18:07.014Z
Reserved: 2024-06-06T15:05:29.932Z
Link: CVE-2024-5696
Updated: 2024-08-01T21:18:07.014Z
Status : Analyzed
Published: 2024-06-11T13:15:51.100
Modified: 2025-11-06T22:25:36.027
Link: CVE-2024-5696
OpenCVE Enrichment
No data.
Debian DLA
Debian DSA
Ubuntu USN