← Zuruck zu CVEs
CVE-2025-1017
CRITICAL9.8
Beschreibung
Memory safety bugs present in Firefox 134, Thunderbird 134, Firefox ESR 128.6, and Thunderbird 128.6. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 135, Firefox ESR < 128.7, Thunderbird < 128.7, and Thunderbird < 135.
CVE Details
CVSS v3.1 Bewertung9.8
SchweregradCRITICAL
CVSS VektorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AngriffsvektorNETWORK
KomplexitatLOW
Erforderliche PrivilegienNONE
BenutzerinteraktionNONE
Veroffentlicht2/4/2025
Zuletzt geandert11/3/2025
Quellenvd
Honeypot-Sichtungen0
Betroffene Produkte
mozilla:firefoxmozilla:thunderbird
Schwachen (CWE)
CWE-787CWE-787
Referenzen
https://bugzilla.mozilla.org/buglist.cgi?bug_id=1926256%2C1935984%2C1935471(security@mozilla.org)
https://www.mozilla.org/security/advisories/mfsa2025-07/(security@mozilla.org)
https://www.mozilla.org/security/advisories/mfsa2025-09/(security@mozilla.org)
https://www.mozilla.org/security/advisories/mfsa2025-10/(security@mozilla.org)
https://www.mozilla.org/security/advisories/mfsa2025-11/(security@mozilla.org)
https://lists.debian.org/debian-lts-announce/2025/02/msg00006.html(af854a3a-2127-422b-91ae-364da2661108)
IOC Korrelationen
Keine Korrelationen erfasst
This product uses data from the NVD API but is not endorsed or certified by the NVD.