Members of the <code>DEVMODEW</code> struct set by the printer device driver weren't being validated and could have resulted in invalid values which in turn would cause the browser to attempt out of bounds access to related variables.<br>*This bug only affects Firefox on Windows. Other operating systems are unaffected.*. This vulnerability affects Firefox < 110, Thunderbird < 102.8, and Firefox ESR < 102.8.
References
Link | Resource |
---|---|
https://bugzilla.mozilla.org/show_bug.cgi?id=1811852 | Issue Tracking Permissions Required |
https://www.mozilla.org/security/advisories/mfsa2023-05/ | Vendor Advisory |
https://www.mozilla.org/security/advisories/mfsa2023-06/ | Vendor Advisory |
https://www.mozilla.org/security/advisories/mfsa2023-07/ | Vendor Advisory |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: mozilla
Published: 2023-06-02T00:00:00
Updated: 2023-06-02T00:00:00
Reserved: 2023-02-13T00:00:00
Link: CVE-2023-25738
JSON object: View
NVD Information
Status : Analyzed
Published: 2023-06-02T17:15:11.367
Modified: 2023-06-08T16:10:29.437
Link: CVE-2023-25738
JSON object: View
Redhat Information
No data.
CWE