Arbitrary code execution in Mozilla products

[engblom]

Is this a new report?

Yes

System Info

Package(s) Affected

firefox* thunderbird*

Does a report exist for this bug with the project's home (upstream) and/or another distro?

Multiple vulnerabilities in Mozilla products
URL: https://www.cisa.gov/news-events/alerts/2023/08/30/mozilla-releases-security-updates-firefox-and-firefox-esr
Classification: Important, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3: None
CVEs: CVE-2023-4051, CVE-2023-4053, CVE-2023-4573, CVE-2023-4574, CVE-2023-4575, CVE-2023-4576, CVE-2023-4577, CVE-2023-4578, CVE-2023-4579, CVE-2023-4580, CVE-2023-4581, CVE-2023-4582, CVE-2023-4583, CVE-2023-4584, CVE-2023-4585 See also: https://www.cisecurity.org/advisory/multiple-vulnerabilities-in-mozilla-products-could-allow-for-arbitrary-code-execution_2023-096
Multiple vulnerabilities have been discovered in Mozilla products, the most severe of which could allow for arbitrary code execution.

SYSTEMS AFFECTED:
Firefox ESR versions prior to 102.15
Firefox ESR versions prior to 115.2
Firefox versions prior to 117
Thunderbird versions prior to 102.15
Thunderbird versions prior to 115.2

Expected behaviour

---

Actual behaviour

---

Steps to reproduce

---