Description
A type check was missing when handling fonts in PDF.js, which would allow arbitrary JavaScript execution in the PDF.js context. This vulnerability affects Firefox < 126, Firefox ESR < 115.11, and Thunderbird < 115.11.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Mozilla Firefox
unspecified to < 126affected
Mozilla Firefox ESR
unspecified to < 115.11affected
Mozilla Thunderbird
unspecified to < 115.11affected
References
- https://bugzilla.mozilla.org/show_bug.cgi?id=1893645 ↗
- https://www.mozilla.org/security/advisories/mfsa2024-21/ ↗
- https://www.mozilla.org/security/advisories/mfsa2024-22/ ↗
- https://www.mozilla.org/security/advisories/mfsa2024-23/ ↗
- https://lists.debian.org/debian-lts-announce/2024/05/msg00010.html ↗
- https://lists.debian.org/debian-lts-announce/2024/05/msg00012.html ↗
- http://seclists.org/fulldisclosure/2024/Aug/30 ↗
- https://github.com/mozilla/pdf.js/releases/tag/v4.2.67 ↗
- https://codeanlabs.com/blog/research/cve-2024-4367-arbitrary-js-execution-in-pdf-js/ ↗
- https://github.com/gogs/gogs/issues/7928 ↗
- https://www.exploit-db.com/exploits/52273 ↗
- https://cert-portal.siemens.com/productcert/html/ssa-827383.html ↗