Aller au contenu
8.8 Élevée

CVE-2023-0767 An attacker could construct a PKCS 12 cert bundle in such a way that could allow for arbitrary memory writes via PKCS 12…

Description

An attacker could construct a PKCS 12 cert bundle in such a way that could allow for arbitrary memory writes via PKCS 12 Safe Bag attributes being mishandled. This vulnerability affects Firefox < 110, Thunderbird < 102.8, and Firefox ESR < 102.8.

Produits et versions touchés

Produit Versions touchées Corrigé en
Firefox 110 premières → < 110 110
Thunderbird 102.8 premières → < 102.8 102.8
Firefox ESR 102.8 premières → < 102.8 102.8
Les 2221 CVE de Firefox →
Suivre cette CVE