Test ID:	1.3.6.1.4.1.25623.1.0.832110
Category:	General
Title:	Mozilla Firefox Security Advisory (MFSA2023-13) - Windows
Summary:	Mozilla Firefox is prone to multiple vulnerabilities.
Description:	Summary: Mozilla Firefox is prone to multiple vulnerabilities. Vulnerability Insight: Multiple flaws exist due to, - Mozilla Maintenance Service Write-lock bypass - Fullscreen notification obscured - Double-free in libwebp - Potential Memory Corruption following Garbage Collector compaction - Invalid free from JavaScript code - Data Races in font initialization code - Directory information could have been leaked to WebExtensions - Content-Disposition filename truncation leads to Reflected File Download - Iframe sandbox bypass using redirects and sourceMappingUrls - Bypass of file download extension restrictions - Use-after-free in debugging APIs - Memory Corruption in garbage collector - Windows Save As dialog resolved environment variables - Secure document cookie could be spoofed with insecure cookie Vulnerability Impact: Successful exploitation will allow attackers to execute arbitrary code, disclose sensitive information and conduct spoofing attacks. Affected Software/OS: Mozilla Firefox version before 112 on Windows. Solution: Upgrade to Mozilla Firefox version 112 or later, Please see the references for more information. CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2023-29532 https://bugzilla.mozilla.org/show_bug.cgi?id=1806394 https://www.mozilla.org/security/advisories/mfsa2023-13/ https://www.mozilla.org/security/advisories/mfsa2023-14/ https://www.mozilla.org/security/advisories/mfsa2023-15/ Common Vulnerability Exposure (CVE) ID: CVE-2023-29533 https://bugzilla.mozilla.org/show_bug.cgi?id=1798219 https://bugzilla.mozilla.org/show_bug.cgi?id=1814597 Common Vulnerability Exposure (CVE) ID: CVE-2023-29535 https://bugzilla.mozilla.org/show_bug.cgi?id=1820543 Common Vulnerability Exposure (CVE) ID: CVE-2023-29536 https://bugzilla.mozilla.org/show_bug.cgi?id=1821959 Common Vulnerability Exposure (CVE) ID: CVE-2023-29537 https://bugzilla.mozilla.org/show_bug.cgi?id=1823365 https://bugzilla.mozilla.org/show_bug.cgi?id=1824200 https://bugzilla.mozilla.org/show_bug.cgi?id=1825569 Common Vulnerability Exposure (CVE) ID: CVE-2023-29538 https://bugzilla.mozilla.org/show_bug.cgi?id=1685403 Common Vulnerability Exposure (CVE) ID: CVE-2023-29539 https://bugzilla.mozilla.org/show_bug.cgi?id=1784348 Common Vulnerability Exposure (CVE) ID: CVE-2023-29540 https://bugzilla.mozilla.org/show_bug.cgi?id=1790542 Common Vulnerability Exposure (CVE) ID: CVE-2023-29542 https://bugzilla.mozilla.org/show_bug.cgi?id=1810793 https://bugzilla.mozilla.org/show_bug.cgi?id=1815062 Common Vulnerability Exposure (CVE) ID: CVE-2023-29543 https://bugzilla.mozilla.org/show_bug.cgi?id=1816158 Common Vulnerability Exposure (CVE) ID: CVE-2023-29544 https://bugzilla.mozilla.org/show_bug.cgi?id=1818781 Common Vulnerability Exposure (CVE) ID: CVE-2023-29545 https://bugzilla.mozilla.org/show_bug.cgi?id=1823077 Common Vulnerability Exposure (CVE) ID: CVE-2023-29547 https://bugzilla.mozilla.org/show_bug.cgi?id=1783536 Common Vulnerability Exposure (CVE) ID: CVE-2023-29548 https://bugzilla.mozilla.org/show_bug.cgi?id=1822754 Common Vulnerability Exposure (CVE) ID: CVE-2023-29549 https://bugzilla.mozilla.org/show_bug.cgi?id=1823042 Common Vulnerability Exposure (CVE) ID: CVE-2023-29550 https://bugzilla.mozilla.org/buglist.cgi?bug_id=1720594%2C1812498%2C1814217%2C1818357%2C1751945%2C1818762%2C1819493%2C1820389%2C1820602%2C1821448%2C1822413%2C1824828 Common Vulnerability Exposure (CVE) ID: CVE-2023-29551 https://bugzilla.mozilla.org/buglist.cgi?bug_id=1763625%2C1814314%2C1815798%2C1815890%2C1819239%2C1819465%2C1819486%2C1819492%2C1819957%2C1820514%2C1820776%2C1821838%2C1822175%2C1823547 Common Vulnerability Exposure (CVE) ID: CVE-2023-1999 https://security.gentoo.org/glsa/202309-05 https://chromium.googlesource.com/webm/libwebp
Copyright	Copyright (C) 2023 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.