CVE-2024-11693

Description

The executable file warning was not presented when downloading .library-ms files. *Note: This issue only affected Windows operating systems. Other operating systems are unaffected.* This vulnerability affects Firefox < 133, Firefox ESR < 128.5, Thunderbird < 133, and Thunderbird < 128.5.

Reserved 2024-11-25 | Published 2024-11-26 | Updated 2024-11-27 | Assigner mozilla

Problem types

Download Protections were bypassed by .library-ms files on Windows

Product status

Any version before 133
affected

Any version before 128.5
affected

Any version before 133
affected

Any version before 128.5
affected

Credits

Marco Bonardo

References

bugzilla.mozilla.org/show_bug.cgi?id=1921458

www.mozilla.org/security/advisories/mfsa2024-63/

www.mozilla.org/security/advisories/mfsa2024-64/

www.mozilla.org/security/advisories/mfsa2024-67/

www.mozilla.org/security/advisories/mfsa2024-68/

cve.org (CVE-2024-11693)

nvd.nist.gov (CVE-2024-11693)

Download JSON