CVE-2024-10466

Description

By sending a specially crafted push message, a remote server could have hung the parent process, causing the browser to become unresponsive. This vulnerability affects Firefox < 132, Firefox ESR < 128.4, Thunderbird < 128.4, and Thunderbird < 132.

Reserved 2024-10-28 | Published 2024-10-29 | Updated 2024-11-13 | Assigner mozilla

Product status

Any version before 132
affected

Any version before 128.4
affected

Any version before 128.4
affected

Any version before 132
affected

Credits

Kagami Rosylight

References

bugzilla.mozilla.org/show_bug.cgi?id=1924154

www.mozilla.org/security/advisories/mfsa2024-55/

www.mozilla.org/security/advisories/mfsa2024-56/

www.mozilla.org/security/advisories/mfsa2024-58/

www.mozilla.org/security/advisories/mfsa2024-59/

cve.org (CVE-2024-10466)

nvd.nist.gov (CVE-2024-10466)

Download JSON