Memory corruption in the networking stack could have led to a potentially exploitable crash. This vulnerability affects Firefox < 125, Firefox ESR < 115.12, and Thunderbird < 115.12.
Metrics
Affected Vendors & Products
Advisories
| Source | ID | Title |
|---|---|---|
Debian DLA |
DLA-3825-1 | firefox-esr security update |
Debian DLA |
DLA-3836-1 | thunderbird security update |
Debian DSA |
DSA-5709-1 | firefox-esr security update |
Debian DSA |
DSA-5711-1 | thunderbird security update |
Ubuntu USN |
USN-6840-1 | Thunderbird vulnerabilities |
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
History
Fri, 04 Apr 2025 15:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Mozilla
Mozilla firefox Mozilla thunderbird |
|
| CPEs | cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:*:*:*:*:esr:*:*:* cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:* |
|
| Vendors & Products |
Mozilla
Mozilla firefox Mozilla thunderbird |
Mon, 12 Aug 2024 18:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
cvssV3_1
|
cvssV3_1
|
Status: PUBLISHED
Assigner: mozilla
Published:
Updated: 2024-08-12T17:00:57.597Z
Reserved: 2024-06-06T15:05:39.622Z
Link: CVE-2024-5702
Updated: 2024-08-01T21:18:06.890Z
Status : Analyzed
Published: 2024-06-11T13:15:51.573
Modified: 2025-04-04T14:41:47.353
Link: CVE-2024-5702
OpenCVE Enrichment
No data.
Debian DLA
Debian DSA
Ubuntu USN