Lucene search
Veracode Vulnerability DatabaseVERACODE:42460HistoryAug 06, 2023 - 9:51 p.m.
Spoofing Attacks
2023-08-0621:51:08
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
11
spoofing attacks
visuals library
heap corruption
crafted html page
software
CVSS3
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
EPSS
0.001
Percentile
38.7%
firefox is vulnerable to Spoofing Attacks. The vulnerability exists due to the heap buffer overflow in the Visuals in the library, which allows an attacker to exploit heap corruption via a crafted HTML page.
Related
cve
cve
CVE-2023-37204
2023-07-05 10:15:09
cvelist
cvelist
CVE-2023-37204
2023-07-05 09:01:40
debiancve
debiancve
CVE-2023-37204
2023-07-05 10:15:09
prion
prion
Design/Logic Flaw
2023-07-05 10:15:00
alpinelinux
alpinelinux
CVE-2023-37204
2023-07-05 10:15:09
nvd
nvd
CVE-2023-37204
2023-07-05 10:15:09
ubuntucve
ubuntucve
CVE-2023-37204
2023-07-05 00:00:00
openvas
openvas
nessus
nessus
Fedora 37 : firefox (2023-5c979c4971)
2023-07-07 00:00:00
ubuntu
ubuntu
Firefox vulnerabilities
2023-07-05 00:00:00
osv
osv
firefox vulnerabilities
2023-07-05 09:23:05
kaspersky
kaspersky
KLA50557 Multiple vulnerabilities in Mozilla Firefox
2023-07-04 00:00:00
mozilla
mozilla
Security Vulnerabilities fixed in Firefox 115 — Mozilla
2023-07-04 00:00:00
gentoo
gentoo
Mozilla Firefox: Multiple Vulnerabilities
2024-01-07 00:00:00
CVSS3
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
EPSS
0.001
Percentile
38.7%
Related for VERACODE:42460