CVE-2023-25738

CVSS v3.1 6.5 (Medium)

EPSS 0.07 % (31^th)

Affected Products 4

Advisories 12

Members of the <code>DEVMODEW</code> struct set by the printer device driver weren't being validated and could have resulted in invalid values which in turn would cause the browser to attempt out of bounds access to related variables.<br>This bug only affects Firefox on Windows. Other operating systems are unaffected.. This vulnerability affects Firefox < 110, Thunderbird < 102.8, and Firefox ESR < 102.8.

Weaknesses

CWE-125: Out-of-bounds Read

CVE Status: PUBLISHED
CNA: Mozilla Corporation
Published Date: 2023-06-02 17:15:11
(15 months ago)
Updated Date: 2023-06-08 16:10:29
(15 months ago)

Affected Products

Microsoft

Windows

Mozilla

Configuration #1

AND

		CPE23	Up To
OR
	Mozilla Firefox prior 110.0 version	cpe:2.3:a:mozilla:firefox	< 110.0
OR
	Running on/with
	Mozilla Firefox Esr prior 102.8 version	cpe:2.3:a:mozilla:firefox_esr	< 102.8
OR
	Running on/with
	Mozilla Thunderbird prior 102.8 version	cpe:2.3:a:mozilla:thunderbird	< 102.8
OR
	Running on/with
	Microsoft Windows	cpe:2.3:o:microsoft:windows:-