6.5

CVE-2023-25752

EPSS 0.1%
Published 02.06.2023 17:15:11
Last modified 21.11.2024 07:50:04
Source security@mozilla.org
Teams watchlist Login
Open Login

When accessing throttled streams, the count of available bytes needed to be checked in the calling function to be within bounds. This may have lead future code to be incorrect and vulnerable. This vulnerability affects Firefox < 111, Firefox ESR < 102.9, and Thunderbird < 102.9.

Affected products Warnungen 0 Metrics 2 CWE 0 References 7

Data is provided by the National Vulnerability Database (NVD)

Mozilla ≫ Firefox Version < 111.0

Mozilla ≫ Firefox ESR Version < 102.9

Mozilla ≫ Thunderbird Version < 102.9

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.1%	0.279

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	6.5	2.8	3.6	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

https://www.mozilla.org/security/advisories/mfsa2023-09/

Vendor Advisory

https://www.mozilla.org/security/advisories/mfsa2023-10/

Vendor Advisory

https://www.mozilla.org/security/advisories/mfsa2023-11/

Vendor Advisory

https://bugzilla.mozilla.org/show_bug.cgi?id=1811627

Vendor Advisory

Issue Tracking

Permissions Required

https://nvd.nist.gov/vuln/detail/CVE-2023-25752

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2023-25752

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2023-25752

EUVD