Mozilla Products Multiple Vulnerabilities - 20240613003

Overview

Multiple vulnerabilities have been discovered in Mozilla Products, the most severe of which could allow for arbitrary code execution.

What is vulnerable?

The following Mozilla products are found vulnerable:

- Firefox versions prior to 127

- Firefox ESR versions prior to 115.12

- Thunderbird versions prior to 115.12

What has been observed?

There is no evidence of exploitation affecting Western Australian Government networks at the time of publishing.

Recommendation

The WA SOC recommends administrators apply the solutions as per vendor instructions to all affected devices within expected timeframe of one month... (refer Patch Management):

• We recommend updating your affected Mozilla products to any of the following or later version(s):

  • Firefox ESR version 115.12

  • Thunderbird version 115.12

  • Firefox version 127

Additional References

• Mozilla Foundation Security Advisory 2024-25
• Mozilla Foundation Security Advisory 2024-26