CVEvulnerability

CVE-2024-0742

4.3 MEDIUM Published 2024-01-23 Modified 2026-06-17 Official page ↗

Status: Modified
Published: 2024-01-23
Last modified: 2026-06-17
Assigner: [email protected]
CVSS 3.1 ([email protected]): 4.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0): 4.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Description

It was possible for certain browser prompts and dialogs to be activated or dismissed unintentionally by the user due to an incorrect timestamp used to prevent input after page load. This vulnerability affects Firefox < 122, Firefox ESR < 115.7, and Thunderbird < 115.7.

Affected configurations

• mozilla firefox (< 122.0) • mozilla firefox esr (< 115.7) • mozilla thunderbird (< 115.7) • debian debian linux 10.0

References

https://bugzilla.mozilla.org/show_bug.cgi?id=1867152 Issue Tracking, Permissions Required
https://lists.debian.org/debian-lts-announce/2024/01/msg00015.html Mailing List, Third Party Advisory
https://lists.debian.org/debian-lts-announce/2024/01/msg00022.html Mailing List, Third Party Advisory
https://www.mozilla.org/security/advisories/mfsa2024-01/ Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2024-02/ Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2024-04/ Vendor Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=1867152 Issue Tracking, Permissions Required
https://lists.debian.org/debian-lts-announce/2024/01/msg00015.html Mailing List, Third Party Advisory
https://lists.debian.org/debian-lts-announce/2024/01/msg00022.html Mailing List, Third Party Advisory
https://www.mozilla.org/security/advisories/mfsa2024-01/ Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2024-02/ Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2024-04/ Vendor Advisory