CVE-2024-0755: Code Injection
Last updated 24 July 2024
Other sources
Memory safety bugs present in Firefox 121, Firefox ESR 115.6, and Thunderbird 115.6. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.
— Mozilla
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Thunderbirdto a version that resolves this vulnerability.Fixed in 115.7 - Upgrade
Upgrade
Firefoxto a version that resolves this vulnerability.Fixed in 122 - Upgrade
Upgrade
Firefox ESRto a version that resolves this vulnerability.Fixed in 115.7 - Upgrade
Upgrade
redhat/firefoxto a version that resolves this vulnerability.Fixed in 115.7 - Upgrade
Upgrade
redhat/thunderbirdto a version that resolves this vulnerability.Fixed in 115.7 - Upgrade
Upgrade
debian/firefox-esrto a version that resolves this vulnerability.Fixed in 115.7.0esr-1~deb12u1 - Upgrade
Upgrade
debian/firefox-esrto a version that resolves this vulnerability.Fixed in 115.7.0esr-1 - Upgrade
Upgrade
debian/thunderbirdto a version that resolves this vulnerability.Fixed in 1:115.7.0-1~deb12u1 - Upgrade
Upgrade
debian/thunderbirdto a version that resolves this vulnerability.Fixed in 1:115.7.0-1 - Upgrade
Upgrade
alpine/firefox-esrto a version that resolves this vulnerability.Fixed in 115.7.0-r0 - Upgrade
Upgrade
debian/firefoxto a version that resolves this vulnerability.Fixed in 159.0.1-1 - Upgrade
Upgrade
debian/firefox-esrto a version that resolves this vulnerability.Fixed in 140.12.0esr-1~deb12u1Fixed in 153.6.0esr-1~deb12u2Fixed in 140.15.0esr-1~deb13u1Fixed in 153.6.0esr-1~deb13u1Fixed in 153.5.1esr-1Fixed in 153.6.0esr-1 - Upgrade
Upgrade
debian/thunderbirdto a version that resolves this vulnerability.Fixed in 1:140.12.0esr-1~deb12u1Fixed in 1:153.6.0esr-1~deb12u2Fixed in 1:140.12.0esr-1~deb13u1Fixed in 1:153.6.0esr-1~deb13u1Fixed in 1:153.5.0esr-1Fixed in 1:153.6.0esr-1
Event History
Parent advisories
This vulnerability appears in the following advisories.
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the severity of CVE-2024-0755?
CVE-2024-0755 is considered to have a high severity due to its potential for memory corruption and arbitrary code execution.
How do I fix CVE-2024-0755?
To fix CVE-2024-0755, you need to update to Firefox 122, Firefox ESR 115.7, or Thunderbird 115.7.
Which versions of software are affected by CVE-2024-0755?
CVE-2024-0755 affects Firefox 121, Firefox ESR 115.6, and Thunderbird 115.6.
Can CVE-2024-0755 be exploited remotely?
Yes, CVE-2024-0755 may be exploited remotely if the memory safety bugs are leveraged.
What types of systems are impacted by CVE-2024-0755?
CVE-2024-0755 impacts systems running vulnerable versions of Mozilla software like Firefox and Thunderbird.