REDHAT-BUG-2460088: High severity Mozilla Firefox ESR vulnerability
Memory safety bugs present in Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 150 and Firefox ESR 140.10.
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-2460088?
The REDHAT-BUG-2460088 vulnerability has a critical severity due to potential exploitation for arbitrary code execution.
How do I fix REDHAT-BUG-2460088?
To fix REDHAT-BUG-2460088, update to the latest versions of Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149, or Thunderbird 149.
What types of software are affected by REDHAT-BUG-2460088?
REDHAT-BUG-2460088 affects Mozilla Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149, and Thunderbird 149.
Is arbitrary code execution possible with REDHAT-BUG-2460088?
Yes, there is evidence that memory corruption in REDHAT-BUG-2460088 could potentially allow for arbitrary code execution.
What is the nature of the vulnerability in REDHAT-BUG-2460088?
The vulnerability in REDHAT-BUG-2460088 is related to memory safety bugs that may lead to memory corruption.