Debian: CVE-2024-29944: firefox-esr——安全更新

Debian: CVE-2024-29944: firefox-esr——安全更新

Severity

4

CVSS

(AV: L /交流:米/非盟:N / C: P / I: P / A: P)

Published

03/22/2024

Created

03/25/2024

Added

03/25/2024

Modified

03/25/2024

描述

攻击者能够将事件处理程序注入特权对象，从而允许在父进程中任意执行JavaScript. 注意:此漏洞仅影响桌面版Firefox，不影响移动版Firefox. This vulnerability affects Firefox < 124.0.1 and Firefox ESR < 115.9.1.

解决方案(年代)

• debian-upgrade-firefox-esr

References

• http://attackerkb.com/topics/cve-2024-29944
• Cve - 2024-29944
• DSA-5645-1