A use-after-free vulnerability in SVG Animation has been discovered. An exploit built on this vulnerability has been discovered in the wild targeting...

原文の説明

取得元が公開している説明をそのまま載せています (多くは英語)。

A use-after-free vulnerability in SVG Animation has been discovered. An exploit built on this vulnerability has been discovered in the wild targeting Firefox and Tor Browser users on Windows. This vulnerability affects Firefox < 50.0.2, Firefox ESR < 45.5.1, and Thunderbird < 45.5.1.

出典: OSV.dev (Open Source Vulnerabilities) OSV

影響パッケージ

Debian:12 firefox-esr

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"45.5.1esr-1"}]}]

Debian:13 firefox-esr

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"45.5.1esr-1"}]}]

Debian:14 firefox-esr

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"45.5.1esr-1"}]}]

参照URL

advisory security-tracker.debian.org