We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.

Please see our statement on Data Privacy.

Crisp.chat (Helpdesk and Chat)

Ok

THREATINT
PUBLISHED

CVE-2024-9398



Assignermozilla
Reserved2024-10-01
Published2024-10-01
Updated2024-10-30

Description

By checking the result of calls to `window.open` with specifically set protocol handlers, an attacker could determine if the application which implements that protocol handler is installed. This vulnerability affects Firefox < 131, Firefox ESR < 128.3, Thunderbird < 128.3, and Thunderbird < 131.

Product status

Any version before 131
affected

Any version before 128.3
affected

Any version before 128.3
affected

Any version before 131
affected

Credits

Satoki Tsuji

References

https://bugzilla.mozilla.org/show_bug.cgi?id=1881037

https://www.mozilla.org/security/advisories/mfsa2024-46/

https://www.mozilla.org/security/advisories/mfsa2024-47/

https://www.mozilla.org/security/advisories/mfsa2024-49/

https://www.mozilla.org/security/advisories/mfsa2024-50/

cve.org CVE-2024-9398

nvd.nist.gov CVE-2024-9398

Download JSON

Share this page
https://cve.threatint.com
Subscribe to our newsletter to learn more about our work.