CVE-2023-6212: High severity thunderbird vulnerability
Memory safety bugs present in Firefox 119, Firefox ESR 115.4, and Thunderbird 115.4. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 120, Firefox ESR < 115.5.0, and Thunderbird < 115.5.
Other sources
Memory safety bugs present in Firefox 119, Firefox ESR 115.4, and Thunderbird 115.4. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.
External Reference: https://www.mozilla.org/en-US/security/advisories/mfsa2023-50/#CVE-2023-6212
— Red Hat
Affected Software
Event History
Parent advisories
This vulnerability appears in the following advisories.
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is CVE-2023-6212?
CVE-2023-6212 is a vulnerability that affects Mozilla Firefox and Thunderbird versions prior to 115.5 and 120 respectively, allowing potential memory corruption and arbitrary code execution.
How severe is CVE-2023-6212?
CVE-2023-6212 is classified as high severity with a severity value of 7.
Which software versions are affected by CVE-2023-6212?
CVE-2023-6212 affects Mozilla Firefox versions prior to 115.5 and Mozilla Thunderbird versions prior to 120.
How can CVE-2023-6212 be exploited?
CVE-2023-6212 can be exploited by exploiting memory corruption bugs in affected Firefox and Thunderbird versions to potentially run arbitrary code.
Is there a fix available for CVE-2023-6212?
Yes, the fix for CVE-2023-6212 is available in Mozilla Firefox version 115.5 and higher, and Mozilla Thunderbird version 120 and higher. It is recommended to update to the latest version to mitigate the vulnerability.