Lucene search

K
vulnrichmentMozillaVULNRICHMENT:CVE-2023-4575
HistorySep 11, 2023 - 8:00 a.m.

CVE-2023-4575

2023-09-1108:00:45
mozilla
github.com
callback
ipc
firefox
thunderbird
vulnerability
use-after-free

AI Score

6.4

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

When creating a callback over IPC for showing the File Picker window, multiple of the same callbacks could have been created at a time and eventually all simultaneously destroyed as soon as one of the callbacks finished. This could have led to a use-after-free causing a potentially exploitable crash. This vulnerability affects Firefox < 117, Firefox ESR < 102.15, Firefox ESR < 115.2, Thunderbird < 102.15, and Thunderbird < 115.2.