Description
By manipulating the text in an `<input>` tag, an attacker could have caused corrupt memory leading to a potentially exploitable crash. This vulnerability affects Firefox < 127, Firefox ESR < 115.12, and Thunderbird < 115.12.
Analysis and contextual insights are available on OpenCVE Cloud.
Remediation
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
Advisories
| Source | ID | Title |
|---|---|---|
Debian DLA |
DLA-3825-1 | firefox-esr security update |
Debian DLA |
DLA-3836-1 | thunderbird security update |
Debian DSA |
DSA-5709-1 | firefox-esr security update |
Debian DSA |
DSA-5711-1 | thunderbird security update |
Ubuntu USN |
USN-6840-1 | Thunderbird vulnerabilities |
Ubuntu USN |
USN-6862-1 | Firefox vulnerabilities |
References
History
Thu, 27 Mar 2025 20:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Debian
Debian debian Linux Mozilla Mozilla firefox Mozilla thunderbird |
|
| CPEs | cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:*:*:*:*:esr:*:*:* cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:* cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:* |
|
| Vendors & Products |
Debian
Debian debian Linux Mozilla Mozilla firefox Mozilla thunderbird |
Status: PUBLISHED
Assigner: mozilla
Published:
Updated: 2024-08-01T21:18:07.014Z
Reserved: 2024-06-06T15:05:29.932Z
Link: CVE-2024-5696
Updated: 2024-08-01T21:18:07.014Z
Status : Analyzed
Published: 2024-06-11T13:15:51.100
Modified: 2025-11-06T22:25:36.027
Link: CVE-2024-5696
OpenCVE Enrichment
No data.
Debian DLA
Debian DSA
Ubuntu USN