CVE-2024-3863
Published: 16 April 2024
The executable file warning was not presented when downloading .xrm-ms files. *Note: This issue only affected Windows operating systems. Other operating systems are unaffected.* This vulnerability affects Firefox < 125, Firefox ESR < 115.10, and Thunderbird < 115.10.
Notes
| Author | Note |
|---|---|
| tyhicks | mozjs contains a copy of the SpiderMonkey JavaScript engine |
| mdeslaur | starting with Ubuntu 22.04, the firefox package is just a script that installs the Firefox snap windows-only |
Priority
Status
| Package | Release | Status |
|---|---|---|
|
firefox Launchpad, Ubuntu, Debian |
focal |
Not vulnerable
(windows-only)
|
| jammy |
Not vulnerable
(code not present)
|
|
| mantic |
Not vulnerable
(code not present)
|
|
| noble |
Not vulnerable
(code not present)
|
|
| upstream |
Not vulnerable
(debian: Windows-specific)
|
|
|
mozjs102 Launchpad, Ubuntu, Debian |
focal |
Does not exist
|
| jammy |
Not vulnerable
(windows-only)
|
|
| mantic |
Not vulnerable
(windows-only)
|
|
| noble |
Not vulnerable
(windows-only)
|
|
| upstream |
Not vulnerable
(windows-only)
|
|
|
mozjs38 Launchpad, Ubuntu, Debian |
bionic |
Not vulnerable
(windows-only)
|
| focal |
Does not exist
|
|
| jammy |
Does not exist
|
|
| mantic |
Does not exist
|
|
| noble |
Does not exist
|
|
| upstream |
Not vulnerable
(windows-only)
|
|
|
mozjs52 Launchpad, Ubuntu, Debian |
bionic |
Not vulnerable
(windows-only)
|
| focal |
Not vulnerable
(windows-only)
|
|
| jammy |
Does not exist
|
|
| mantic |
Does not exist
|
|
| noble |
Does not exist
|
|
| upstream |
Not vulnerable
(windows-only)
|
|
|
mozjs68 Launchpad, Ubuntu, Debian |
focal |
Not vulnerable
(windows-only)
|
| jammy |
Does not exist
|
|
| mantic |
Does not exist
|
|
| noble |
Does not exist
|
|
| upstream |
Not vulnerable
(windows-only)
|
|
|
mozjs78 Launchpad, Ubuntu, Debian |
focal |
Does not exist
|
| jammy |
Not vulnerable
(windows-only)
|
|
| mantic |
Does not exist
|
|
| noble |
Does not exist
|
|
| upstream |
Not vulnerable
(windows-only)
|
|
|
mozjs91 Launchpad, Ubuntu, Debian |
focal |
Does not exist
|
| jammy |
Not vulnerable
(windows-only)
|
|
| mantic |
Does not exist
|
|
| noble |
Does not exist
|
|
| upstream |
Not vulnerable
(windows-only)
|
|
|
thunderbird Launchpad, Ubuntu, Debian |
focal |
Not vulnerable
(windows-only)
|
| jammy |
Not vulnerable
(windows-only)
|
|
| mantic |
Not vulnerable
(windows-only)
|
|
| noble |
Not vulnerable
(windows-only)
|
|
| upstream |
Not vulnerable
(windows-only)
|