CVE:CVE-2023-29531
CNNVD:CNNVD-202304-923
Mozilla Firefox ESR是美国Mozilla基金会的Firefox(Web浏览器)的一个延长支持版本。
Mozilla Firefox ESR 存在安全漏洞。攻击者利用该漏洞使用WebGL API导致越界内存访问，从而导致内存损坏和进程崩溃。
solution:Upgrade mozilla firefox to a higher version than 112.0,and avoid the version (,112.0); Upgrade mozilla firefox_esr to a higher version than 102.10,and avoid the version (,102.10); Upgrade mozilla thunderbird to a higher version than 102.10,and avoid the version (,102.10)