CVE-2024-1552

Incorrect code generation could have led to unexpected numeric conversions and potential undefined behavior.Note: This issue only affects 32-bit ARM devices. This vulnerability affects Firefox < 123, Firefox ESR < 115.8, and Thunderbird < 115.8.

Incorrect code generation could have led to unexpected numeric conversions and potential undefined behavior.Note: This issue only affects 32-bit ARM devices. This vulnerability affects Firefox < 123, Firefox ESR < 115.8, and Thunderbird < 115.8.

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.

This update upgrades Firefox to version 115.8.0 ESR.

Security Fix(es):

• Mozilla: Out-of-bounds memory read in networking channels (CVE-2024-1546)
• Mozilla: Alert dialog could have been spoofed on another site (CVE-2024-1547)
• Mozilla: Memory safety bugs fixed in Firefox 123, Firefox ESR 115.8, and Thunderbird 115.8 (CVE-2024-1553)
• Mozilla: Fullscreen Notification could have been hidden by select element (CVE-2024-1548)
• Mozilla: Custom cursor could obscure the permission dialog (CVE-2024-1549)
• Mozilla: Mouse cursor re-positioned unexpectedly could have led to unintended permission grants (CVE-2024-1550)
• Mozilla: Multipart HTTP Responses would accept the Set-Cookie header in response parts (CVE-2024-1551)
• Mozilla: Incorrect code generation on 32-bit ARM devices (CVE-2024-1552)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.

This update upgrades Firefox to version 115.8.0 ESR.

Security Fix(es):

• Mozilla: Out-of-bounds memory read in networking channels (CVE-2024-1546)
• Mozilla: Alert dialog could have been spoofed on another site (CVE-2024-1547)
• Mozilla: Memory safety bugs fixed in Firefox 123, Firefox ESR 115.8, and Thunderbird 115.8 (CVE-2024-1553)
• Mozilla: Fullscreen Notification could have been hidden by select element (CVE-2024-1548)
• Mozilla: Custom cursor could obscure the permission dialog (CVE-2024-1549)
• Mozilla: Mouse cursor re-positioned unexpectedly could have led to unintended permission grants (CVE-2024-1550)
• Mozilla: Multipart HTTP Responses would accept the Set-Cookie header in response parts (CVE-2024-1551)
• Mozilla: Incorrect code generation on 32-bit ARM devices (CVE-2024-1552)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Mozilla Thunderbird is a standalone mail and newsgroup client.

This update upgrades Thunderbird to version 115.8.0.

Security Fix(es):

• Mozilla: Out-of-bounds memory read in networking channels (CVE-2024-1546)
• Mozilla: Alert dialog could have been spoofed on another site (CVE-2024-1547)
• Mozilla: Memory safety bugs fixed in Firefox 123, Firefox ESR 115.8, and Thunderbird 115.8 (CVE-2024-1553)
• Mozilla: Fullscreen Notification could have been hidden by select element (CVE-2024-1548)
• Mozilla: Custom cursor could obscure the permission dialog (CVE-2024-1549)
• Mozilla: Mouse cursor re-positioned unexpectedly could have led to unintended permission grants (CVE-2024-1550)
• Mozilla: Multipart HTTP Responses would accept the Set-Cookie header in response parts (CVE-2024-1551)
• Mozilla: Incorrect code generation on 32-bit ARM devices (CVE-2024-1552)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Mozilla Thunderbird is a standalone mail and newsgroup client.

This update upgrades Thunderbird to version 115.8.0.

Security Fix(es):

• Mozilla: Out-of-bounds memory read in networking channels (CVE-2024-1546)
• Mozilla: Alert dialog could have been spoofed on another site (CVE-2024-1547)
• Mozilla: Memory safety bugs fixed in Firefox 123, Firefox ESR 115.8, and Thunderbird 115.8 (CVE-2024-1553)
• Mozilla: Fullscreen Notification could have been hidden by select element (CVE-2024-1548)
• Mozilla: Custom cursor could obscure the permission dialog (CVE-2024-1549)
• Mozilla: Mouse cursor re-positioned unexpectedly could have led to unintended permission grants (CVE-2024-1550)
• Mozilla: Multipart HTTP Responses would accept the Set-Cookie header in response parts (CVE-2024-1551)
• Mozilla: Incorrect code generation on 32-bit ARM devices (CVE-2024-1552)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

The updated packages fix security vulnerabilities: Timing attack against RSA decryption in TLS. (CVE-2023-5388) Out-of-bounds memory read in networking channels. (CVE-2024-1546) Alert dialog could have been spoofed on another site. (CVE-2024-1547) Fullscreen Notification could have been hidden by select element. (CVE-2024-1548) Custom cursor could obscure the permission dialog. (CVE-2024-1549) Mouse cursor re-positioned unexpectedly could have led to unintended permission grants. (CVE-2024-1550) Multipart HTTP Responses would accept the Set-Cookie header in response parts. (CVE-2024-1551) Incorrect code generation on 32-bit ARM devices. (CVE-2024-1552) Memory safety bugs fixed in Firefox 123, Firefox ESR 115.8, and Thunderbird 115.8. (CVE-2024-1553)

The updated packages fix security vulnerabilities: Out-of-bounds memory read in networking channels. (CVE-2024-1546) Alert dialog could have been spoofed on another site. (CVE-2024-1547) Fullscreen Notification could have been hidden by select element. (CVE-2024-1548) Custom cursor could obscure the permission dialog. (CVE-2024-1549) Mouse cursor re-positioned unexpectedly could have led to unintended permission grants. (CVE-2024-1550) Multipart HTTP Responses would accept the Set-Cookie header in response parts. (CVE-2024-1551) Incorrect code generation on 32-bit ARM devices. (CVE-2024-1552) Memory safety bugs fixed in Firefox 123, Firefox ESR 115.8, and Thunderbird 115.8. (CVE-2024-1553)

These are all security issues fixed in the MozillaThunderbird-115.8.0-1.1 package on the GA media of openSUSE Tumbleweed.

These are all security issues fixed in the MozillaFirefox-123.0-1.1 package on the GA media of openSUSE Tumbleweed.

These are all security issues fixed in the firefox-esr-128.5.1-1.1 package on the GA media of openSUSE Tumbleweed.

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.

This update upgrades Firefox to version 115.8.0 ESR.

Security Fix(es):

• Mozilla: Out-of-bounds memory read in networking channels (CVE-2024-1546)

• Mozilla: Alert dialog could have been spoofed on another site (CVE-2024-1547)

• Mozilla: Memory safety bugs fixed in Firefox 123, Firefox ESR 115.8, and Thunderbird 115.8 (CVE-2024-1553)

• Mozilla: Fullscreen Notification could have been hidden by select element (CVE-2024-1548)

• Mozilla: Custom cursor could obscure the permission dialog (CVE-2024-1549)

• Mozilla: Mouse cursor re-positioned unexpectedly could have led to unintended permission grants (CVE-2024-1550)

• Mozilla: Multipart HTTP Responses would accept the Set-Cookie header in response parts (CVE-2024-1551)

• Mozilla: Incorrect code generation on 32-bit ARM devices (CVE-2024-1552)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

This update for MozillaFirefox fixes the following issues:

Update to Firefox Extended Support Release 115.8.0 ESR (MFSA 2024-06) (bsc#1220048):

• CVE-2024-1546: Out-of-bounds memory read in networking channels

• CVE-2024-1547: Alert dialog could have been spoofed on another site

• CVE-2024-1548: Fullscreen Notification could have been hidden by select element

• CVE-2024-1549: Custom cursor could obscure the permission dialog

• CVE-2024-1550: Mouse cursor re-positioned unexpectedly could have led to unintended permission grants

• CVE-2024-1551: Multipart HTTP Responses would accept the Set-Cookie header in response parts

• CVE-2024-1552: Incorrect code generation on 32-bit ARM devices

• CVE-2024-1553: Memory safety bugs fixed in Firefox 123, Firefox ESR 115.8, and Thunderbird 115.8

• Recommend libfido2-udev on codestreams that exist, in order to try to get security keys (e.g. Yubikeys) work out of the box. (bsc#1184272)

This update for MozillaFirefox fixes the following issues:

Update to Firefox Extended Support Release 115.8.0 ESR (MFSA 2024-06) (bsc#1220048):

• CVE-2024-1546: Out-of-bounds memory read in networking channels

• CVE-2024-1547: Alert dialog could have been spoofed on another site

• CVE-2024-1548: Fullscreen Notification could have been hidden by select element

• CVE-2024-1549: Custom cursor could obscure the permission dialog

• CVE-2024-1550: Mouse cursor re-positioned unexpectedly could have led to unintended permission grants

• CVE-2024-1551: Multipart HTTP Responses would accept the Set-Cookie header in response parts

• CVE-2024-1552: Incorrect code generation on 32-bit ARM devices

• CVE-2024-1553: Memory safety bugs fixed in Firefox 123, Firefox ESR 115.8, and Thunderbird 115.8

• Recommend libfido2-udev on codestreams that exist, in order to try to get security keys (e.g. Yubikeys) work out of the box. (bsc#1184272)

This update for MozillaThunderbird fixes the following issues:

Mozilla Thunderbird 115.8 (bsc#1220048):

• CVE-2024-1546: Out-of-bounds memory read in networking channels
• CVE-2024-1547: Alert dialog could have been spoofed on another site
• CVE-2024-1548: Fullscreen Notification could have been hidden by select element
• CVE-2024-1549: Custom cursor could obscure the permission dialog
• CVE-2024-1550: Mouse cursor re-positioned unexpectedly could have led to unintended permission grants
• CVE-2024-1551: Multipart HTTP Responses would accept the Set-Cookie header in response parts
• CVE-2024-1552: Incorrect code generation on 32-bit ARM devices
• CVE-2024-1553: Memory safety bugs fixed in Firefox 123, Firefox ESR 115.8, and Thunderbird 115.8

This update for MozillaFirefox fixes the following issues:

Firefox Extended Support Release 115.9.1esr ESR MFSA 2024-16 (bsc#1221850).

• CVE-2024-29944: Privileged JavaScript Execution via Event Handlers (bmo#1886852).

Firefox Extended Support Release 115.9.0 ESR (bsc#1221327):

• CVE-2024-0743: Crash in NSS TLS method (bmo#1867408).
• CVE-2024-2605: Windows Error Reporter could be used as a Sandbox escape vector (bmo#1872920).
• CVE-2024-2607: JIT code failed to save return registers on Armv7-A (bmo#1879939).
• CVE-2024-2608: Integer overflow could have led to out of bounds write (bmo#1880692).
• CVE-2024-2616: Improve handling of out-of-memory conditions in ICU (bmo#1846197).
• CVE-2023-5388: NSS susceptible to timing attack against RSA decryption (bmo#1780432).
• CVE-2024-2610: Improper handling of html and body tags enabled CSP nonce leakage (bmo#1871112).
• CVE-2024-2611: Clickjacking vulnerability could have led to a user accidentally granting permissions (bmo#1876675).
• CVE-2024-2612: Self referencing object could have potentially led to a use- after-free (bmo#1879444).
• CVE-2024-2614: Memory safety bugs fixed in Firefox 124, Firefox ESR 115.9, and Thunderbird 115.9 (bmo#1685358, bmo#1861016, bmo#1880405, bmo#1881093).

Multiple security issues were discovered in Firefox. If a user were tricked into opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, obtain sensitive information across domains, or execute arbitrary code. (CVE-2024-1547, CVE-2024-1548, CVE-2024-1549, CVE-2024-1550, CVE-2024-1553, CVE-2024-1554, CVE-2024-1555, CVE-2024-1557)

Alfred Peters discovered that Firefox did not properly manage memory when storing and re-accessing data on a networking channel. An attacker could potentially exploit this issue to cause a denial of service. (CVE-2024-1546)

Johan Carlsson discovered that Firefox incorrectly handled Set-Cookie response headers in multipart HTTP responses. An attacker could potentially exploit this issue to inject arbitrary cookie values. (CVE-2024-1551)

Gary Kwong discovered that Firefox incorrectly generated codes on 32-bit ARM devices, which could lead to unexpected numeric conversions or undefined behaviour. An attacker could possibly use this issue to cause a denial of service. (CVE-2024-1552)

Ronald Crane discovered that Firefox did not properly manage memory when accessing the built-in profiler. An attacker could potentially exploit this issue to cause a denial of service. (CVE-2024-1556)

Multiple security issues were discovered in Thunderbird. If a user were tricked into opening a specially crafted website in a browsing context, an attacker could potentially exploit these to cause a denial of service, obtain sensitive information, bypass security restrictions, cross-site tracing, or execute arbitrary code. (CVE-2024-0741, CVE-2024-0742, CVE-2024-0747, CVE-2024-0749, CVE-2024-0750, CVE-2024-0751, CVE-2024-0753, CVE-2024-0755, CVE-2024-1547, CVE-2024-1548, CVE-2024-1549, CVE-2024-1550, CVE-2024-1553, CVE-2024-1936)

Cornel Ionce discovered that Thunderbird did not properly manage memory when opening the print preview dialog. An attacker could potentially exploit this issue to cause a denial of service. (CVE-2024-0746)

Alfred Peters discovered that Thunderbird did not properly manage memory when storing and re-accessing data on a networking channel. An attacker could potentially exploit this issue to cause a denial of service. (CVE-2024-1546)

Johan Carlsson discovered that Thunderbird incorrectly handled Set-Cookie response headers in multipart HTTP responses. An attacker could potentially exploit this issue to inject arbitrary cookie values. (CVE-2024-1551)

Gary Kwong discovered that Thunderbird incorrectly generated codes on 32-bit ARM devices, which could lead to unexpected numeric conversions or undefined behaviour. An attacker could possibly use this issue to cause a denial of service. (CVE-2024-1552)