CVE-2023-5168

Description

A compromised content process could have provided malicious data to `FilterNodeD2D1` resulting in an out-of-bounds write, leading to a potentially exploitable crash in a privileged process. *This bug only affects Firefox on Windows. Other operating systems are unaffected.* This vulnerability affects Firefox < 118, Firefox ESR < 115.3, and Thunderbird < 115.3.

CVSS Metrics

• v3.1•CRITICAL•Score: 9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS Trends

Current EPSS score: 0.26%• Percentile: 49%

Techniques & Countermeasures

• CWE-787•Out-of-bounds Write

  The product writes data past the end, or before the beginning, of the intended buffer.

Affected Systems

• Unknown•Firefox

  ≥ unspecified, < 118 | < 118

• mozilla•firefox esr

  ≥ unspecified, < 115.3 | < 115.3

• mozilla•thunderbird

  ≥ unspecified, < 115.3 | < 115.3

References (4)

• https://bugzilla.mozilla.org/show_bug.cgi?id=1846683
• https://www.mozilla.org/security/advisories/mfsa2023-41/
• https://www.mozilla.org/security/advisories/mfsa2023-42/
• https://www.mozilla.org/security/advisories/mfsa2023-43/