Debian/firefox-esr: high 8.8
When handling keypress events, an attacker may have been able to trick a user into bypassing the "Open Executable File?" confirmation dialog. This could have led to malicious code execution. This vuln
Action: Upgrade firefox-esr to 128.5.0esr-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 128.5.0esr-1 | - |
Fixed versions
| 128.5.0esr-1 |
Sources
- osv: DEBIAN-CVE-2024-11697#Debian:14/firefox-esr
- https://security-tracker.debian.org/tracker/CVE-2024-11697
published · modified · JSON