UBUNTU-CVE-2023-5169

Dashboard / Vulnerabilities / UBUNTU-CVE-2023-5169

UBUNTU-CVE-2023-5169

Summary:

Details: A compromised content process could have provided malicious data in a `PathRecording` resulting in an out-of-bounds write, leading to a potentially exploitable crash in a privileged process. This vulnerability affects Firefox < 118, Firefox ESR < 115.3, and Thunderbird < 115.3.

References: https://ubuntu.com/security/CVE-2023-5169, https://www.mozilla.org/en-US/security/advisories/mfsa2023-41/#CVE-2023-5169, https://www.mozilla.org/en-US/security/advisories/mfsa2023-42/#CVE-2023-5169, https://www.mozilla.org/en-US/security/advisories/mfsa2023-43/#CVE-2023-5169, https://www.mozilla.org/security/advisories/mfsa2023-41/, https://bugzilla.mozilla.org/show_bug.cgi?id=1846685, https://www.mozilla.org/security/advisories/mfsa2023-43/, https://www.mozilla.org/security/advisories/mfsa2023-42/, https://ubuntu.com/security/notices/USN-6404-1, https://ubuntu.com/security/notices/USN-6405-1, https://www.cve.org/CVERecord?id=CVE-2023-5169