Mozilla fixes a critical severity vulnerability in Firefox (117.0.1), Firefox ESR (115.2.1) (102.15.1) and Thunderbird (102.15.1) (115.2.2)
Hey everyone!
Mozilla has fixed a critical severity security vulnerability in Firefox (117.0.1), Firefox ESR (115.2.1) (102.15.1) and Thunderbird (102.15.1) (115.2.2). The details of the vulnerability fixed are as follows:
Platform | CVE ID | Vulnerability | Impact |
Firefox (117.0.1), Firefox ESR (115.2.1) (102.15.1) and Thunderbird (102.15.1) (115.2.2) | CVE-2023-4863 | Heap buffer overflow in libwebp | Critical |
To install this update on your machines, initiate a sync between the Central Patch Repository and the Patch Manager Plus server. Once the sync is complete, search for the following Patch IDs or Bulletin ID and deploy them to your target systems.
Patch details:
Patch ID | Bulletin ID | Patch description |
332892 | TU-027 | Mozilla Firefox (117.0.1) |
332893 | TU-027 | Mozilla Firefox (x64) (117.0.1) |
332912 | TU-028 | Mozilla Thunderbird 115 (115.2.2) |
332913 | TU-028 | Mozilla Thunderbird 115 (x64) (115.2.2) |
332914 | TU-028 | Mozilla Thunderbird 102 (102.15.1) |
332911 | TU-028 | Mozilla Thunderbird 102 (x64) (102.15.1) |
332906 | TU-054 | Mozilla Firefox ESR (102) (102.15.1) |
332907 | TU-054 | Mozilla Firefox ESR (102) (x64) (102.15.1) |
332908 | TU-054 | Mozilla Firefox ESR (115) (115.2.1) |
332909 | TU-054 | Mozilla Firefox ESR (115) (x64) (115.2.1) |
605755 | MAC-006 | Mozilla Firefox For Mac (117.0.1) |
605756 | MAC-111 | Mozilla Firefox ESR for Mac (102.15.1) |
605758 | MAC-007 | Mozilla Thunderbird For Mac (115.2.2) |
Cheers,
The ManageEngine Team