Oracle Linux: CVE-2023-25743: ELSA-2023-0810: firefox security update (IMPORTANT) (Multiple Advisories)

Oracle Linux: CVE-2023-25743: ELSA-2023-0810:firefox security update (IMPORTANT) (Multiple Advisories)

Severity

8

CVSS

(AV:N/AC:H/Au:N/C:C/I:C/A:C)

Published

02/14/2023

Created

02/22/2023

Added

02/21/2023

Modified

01/07/2025

Description

A lack of in app notification for entering fullscreen mode could have lead to a malicious website spoofing browser chrome.<br>*This bug only affects Firefox Focus. Other versions of Firefox are unaffected.*. This vulnerability affects Firefox < 110 and Firefox ESR < 102.8. The Mozilla Foundation Security Advisory describes this flaw as: A lack of in app notification for entering fullscreen mode could have lead to a malicious website spoofing browser chrome. *This bug only affects Firefox Focus. Other versions of Firefox are unaffected.*

Solution(s)

• oracle-linux-upgrade-firefox
• oracle-linux-upgrade-firefox-x11
• oracle-linux-upgrade-thunderbird

References

• https://attackerkb.com/topics/cve-2023-25743
• CVE - 2023-25743
• ELSA-2023-0810
• ELSA-2023-0808
• ELSA-2023-0821
• ELSA-2023-0812
• ELSA-2023-0824
• ELSA-2023-0817

View more