Ubuntu: (Multiple Advisories) (CVE-2023-25751): Firefox vulnerabilities

Ubuntu: (Multiple Advisories) (CVE-2023-25751): Firefox vulnerabilities

Severity

7

CVSS

(AV:N/AC:M/Au:N/C:N/I:N/A:C)

Published

03/15/2023

Created

03/29/2023

Added

03/22/2023

Modified

01/28/2025

Description

Sometimes, when invalidating JIT code while following an iterator, the newly generated code could be overwritten incorrectly. This could lead to a potentially exploitable crash. This vulnerability affects Firefox < 111, Firefox ESR < 102.9, and Thunderbird < 102.9.

Solution(s)

• ubuntu-upgrade-firefox
• ubuntu-upgrade-libmozjs-102-0
• ubuntu-upgrade-thunderbird

References

• https://attackerkb.com/topics/cve-2023-25751
• CVE - 2023-25751
• USN-5954-1
• USN-5954-2
• USN-5972-1
• USN-6120-1