[Forgot Password]
Login  Register Subscribe

30481

 
 

423868

 
 

256610

 
 

909

 
 

199263

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

Memory corruption in IPC ColorPickerShownCallback - CVE-2023-4574

ID: oval:org.secpod.oval:def:92758Date: (C)2023-08-31   (M)2023-12-26
Class: VULNERABILITYFamily: macos




Mozilla Firefox 117Mozilla Firefox ESR 115.2, Mozilla Thunderbird 102.15, Mozilla Thunderbird 115.2 : When creating a callback over IPC for showing the Color Picker window, multiple of the same callbacks could have been created at a time and eventually all simultaneously destroyed as soon as one of the callbacks finished. This could have led to a use-after-free causing a potentially exploitable crash.

Platform:
Apple Mac OS 14
Apple Mac OS 13
Apple Mac OS X 10.9
Apple Mac OS X 10.10
Apple Mac OS X 10.11
Apple Mac OS X 10.12
Apple Mac OS X 10.13
Apple Mac OS X 10.14
Apple Mac OS X 10.15
Apple Mac OS 11
Apple Mac OS 12
Product:
Mozilla Firefox
Mozilla Firefox ESR
Mozilla Thunderbird
Reference:
CVE-2023-4574
CVE    1
CVE-2023-4574

© SecPod Technologies