REDHAT-BUG-2343760: Use After Free
First published: Tue Feb 04 2025(Updated: )
An attacker could have caused a use-after-free via crafted XSLT data, leading to a potentially exploitable crash. This vulnerability affects Firefox < 135, Firefox ESR < 115.20, Firefox ESR < 128.7, Thunderbird < 128.7, and Thunderbird < 135.
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Mozilla Firefox | <135 | |
| Mozilla Firefox ESR | <115.20<128.7 | |
| Mozilla Thunderbird | <128.7<135 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://access.redhat.com/errata/RHSA-2025:1066
- https://access.redhat.com/errata/RHSA-2025:1133
- https://access.redhat.com/errata/RHSA-2025:1135
- https://access.redhat.com/errata/RHSA-2025:1138
- https://access.redhat.com/errata/RHSA-2025:1136
- https://access.redhat.com/errata/RHSA-2025:1132
- https://access.redhat.com/errata/RHSA-2025:1137
- https://access.redhat.com/errata/RHSA-2025:1139
- https://access.redhat.com/errata/RHSA-2025:1140
- https://access.redhat.com/errata/RHSA-2025:1184
- https://access.redhat.com/errata/RHSA-2025:1283
- https://access.redhat.com/errata/RHSA-2025:1292
- https://access.redhat.com/errata/RHSA-2025:1319
- https://access.redhat.com/errata/RHSA-2025:1317
- https://access.redhat.com/errata/RHSA-2025:1318
- https://access.redhat.com/errata/RHSA-2025:1339
- https://access.redhat.com/errata/RHSA-2025:1340
- https://access.redhat.com/errata/RHSA-2025:1341
- https://access.redhat.com/errata/RHSA-2025:1348
- https://bugzilla.redhat.com/show_bug.cgi?id=2343760
Frequently Asked Questions
What is the severity of REDHAT-BUG-2343760?
The severity of REDHAT-BUG-2343760 is classified as potentially high due to the risk of crashes and exploitation.
How do I fix REDHAT-BUG-2343760?
To fix REDHAT-BUG-2343760, update to the latest versions of Firefox, Firefox ESR, or Thunderbird as specified in the vulnerability description.
Which software versions are affected by REDHAT-BUG-2343760?
REDHAT-BUG-2343760 affects Firefox versions earlier than 135, Firefox ESR versions earlier than 115.20 and 128.7, and Thunderbird versions earlier than 128.7 and 135.
What could an attacker do with REDHAT-BUG-2343760?
An attacker could exploit REDHAT-BUG-2343760 to cause a use-after-free vulnerability potentially leading to a crash.
Is there a patch available for REDHAT-BUG-2343760?
Yes, patches for REDHAT-BUG-2343760 are included in the latest updates for the affected software.
- agent/weakness
- agent/source
- agent/severity
- agent/first-publish-date
- agent/description
- agent/type
- agent/event
- agent/guess-ai
- agent/software-canonical-lookup
- agent/softwarecombine
- agent/references
- agent/last-modified-date
- agent/tags
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2025-1009
- vendor/mozilla
- canonical/mozilla firefox
- canonical/mozilla firefox esr
- canonical/mozilla thunderbird