← back
CVE-2023-37208

CVE-2023-37208

EPSS 0.3%CWE-434
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 0.3%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
05 Jul 2023Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
When opening Diagcab files, Firefox did not warn the user that these files may contain malicious code. This vulnerability affects Firefox < 115, Firefox ESR < 102.13, and Thunderbird < 102.13.
Affected products
Mozilla · FirefoxMozilla · Firefox ESRMozilla · Thunderbird
References
https://bugzilla.mozilla.org/show_bug.cgi?id=1837675https://lists.debian.org/debian-lts-announce/2023/07/msg00006.htmlhttps://lists.debian.org/debian-lts-announce/2023/07/msg00015.htmlhttps://www.debian.org/security/2023/dsa-5450https://www.debian.org/security/2023/dsa-5451https://www.mozilla.org/security/advisories/mfsa2023-22/https://www.mozilla.org/security/advisories/mfsa2023-23/https://www.mozilla.org/security/advisories/mfsa2023-24/