CVE:CVE-2023-29536
CNNVD:CNNVD-202304-917
Mozilla Firefox ESR是美国Mozilla基金会的Firefox(Web浏览器)的一个延长支持版本。
Mozilla Firefox ESR 102.10之前版本存在安全漏洞，攻击者利用该漏洞可以通过内存管理器错误地释放指向控制内存的指针，从而导致断言、内存损坏或潜在的可利用崩溃。
solution:Upgrade mozilla firefox to a higher version than 112.0,and avoid the version (,112.0); Upgrade mozilla firefox_esr to a higher version than 102.10,and avoid the version (,102.10); Upgrade mozilla focus to a higher version than 112.0,and avoid the version (,112.0); Upgrade mozilla thunderbird to a higher version than 102.10,and avoid the version (,102.10)