CVE-2024-11697

Summary

When handling keypress events, an attacker may have been able to trick a user into bypassing the "Open Executable File?" confirmation dialog. This could have led to malicious code execution. This vulnerability affects Firefox < 133, Firefox ESR < 128.5, Thunderbird < 133, and Thunderbird < 128.5.

Affected Software

VendorProductVersion RangeStatus
MozillaFirefoxunspecified < 133affected
MozillaFirefox ESRunspecified < 128.5affected
MozillaThunderbirdunspecified < 133affected
MozillaThunderbirdunspecified < 128.5affected

Weaknesses

  • Improper Keypress Handling in Executable File Confirmation Dialog

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: total

CVE Program Container

Additional References

References