Out-of-Bounds Read in Firefox and Thunderbird Affecting Mozilla
CVE-2024-6606

8.2HIGH

Key Information:

Vendor

Mozilla
Status
Firefox
Thunderbird
Vendor
CVE Published:
9 July 2024

What is CVE-2024-6606?

A vulnerability exists in Firefox and Thunderbird due to improper index validation during array access in the clipboard code. This flaw could potentially allow an attacker to conduct out-of-bounds read operations, leading to unauthorized data exposure or application crashes. Users of affected versions are advised to update their browsers to mitigate this issue.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Firefox < 128

Thunderbird < 128

References

https://bugzilla.mozilla.org/show_bug.cgi?id=1902305
https://www.mozilla.org/security/advisories/mfsa2024-29/
https://www.mozilla.org/security/advisories/mfsa2024-32/

CVSS V3.1

Score:
8.2
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

Credit

dalmurino
JSON
.