Firefox Vulnerability Allows Malicious Code Execution Through Manipulation of Keypress Events
CVE-2024-11697

8.8HIGH

Key Information:

Vendor

Mozilla
Status
Firefox
Firefox Esr
Thunderbird
Vendor
CVE Published:
26 November 2024

What is CVE-2024-11697?

A vulnerability exists that could permit an attacker to manipulate keypress events, enabling them to deceive the user into bypassing the 'Open Executable File?' confirmation dialog. This flaw raises concerns regarding the execution of potentially harmful code within the Firefox and Thunderbird applications, affecting several versions and highlighting the need for immediate action to mitigate risks.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Firefox < 133

Firefox ESR < 128.5

Thunderbird < 133

References

https://bugzilla.mozilla.org/show_bug.cgi?id=1842187
https://www.mozilla.org/security/advisories/mfsa2024-63/
https://www.mozilla.org/security/advisories/mfsa2024-64/

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Umar Farooq
JSON
.