Description
An out-of-bound read could have led to a crash in the RLBox Expat driver. This vulnerability affects Firefox < 113, Firefox ESR < 102.11, and Thunderbird < 102.11.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Mozilla Firefox
unspecified to < 113affected
Mozilla Firefox ESR
unspecified to < 102.11affected
Mozilla Thunderbird
unspecified to < 102.11affected
References
- https://bugzilla.mozilla.org/show_bug.cgi?id=1824892 ↗
- https://security.gentoo.org/glsa/202312-03 ↗
- https://security.gentoo.org/glsa/202401-10 ↗
- https://www.mozilla.org/security/advisories/mfsa2023-16/ ↗
- https://www.mozilla.org/security/advisories/mfsa2023-17/ ↗
- https://www.mozilla.org/security/advisories/mfsa2023-18/ ↗