Reflected cross-site scripting (XSS) In webkit2gtk
Description
A type check was missing when handling fonts in PDF.js, which would allow arbitrary JavaScript execution in the PDF.js context. This vulnerability affects Firefox < 126, Firefox ESR < 115.11, and Thunderbird < 115.11.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Component | Affected version | Patched versions |
|---|---|---|---|
 debian 13 | >=0 <115.11.0esr-1 | 115.11.0esr-1 | |
debian 14 | >=0 <115.11.0esr-1 | 115.11.0esr-1 | |
debian 11 | =102.1.0esr-1 || =102.1.0esr-2 || =102.10.0esr-1 || =102.10.0esr-1~deb10u1 || =102.10.0esr-1~deb11u1 || =102.11.0esr-1 || =102.11.0esr-1~deb10u1 || =102.11.0esr-1~deb11u1 || =102.12.0esr-1 || =102.12.0esr-1~deb10u1 || =102.12.0esr-1~deb11u1 || =102.12.0esr-1~deb12u1 || =102.13.0esr-1 || =102.13.0esr-1~deb10u1 || =102.13.0esr-1~deb11u1 || =102.13.0esr-1~deb12u1 || =102.14.0esr-1~deb10u1 || =102.14.0esr-1~deb11u1 || =102.14.0esr-1~deb12u1 || =102.15.0esr-1~deb10u1 || =102.15.0esr-1~deb11u1 || =102.15.0esr-1~deb12u1 || =102.15.1esr-1~deb10u1 || =102.15.1esr-1~deb11u1 || =102.15.1esr-1~deb12u1 || =102.2.0esr-1 || =102.3.0esr-1 || =102.3.0esr-1~deb10u1 || =102.3.0esr-1~deb10u2 || =102.3.0esr-1~deb11u1 || =102.4.0esr-1 || =102.4.0esr-1~deb10u1 || =102.4.0esr-1~deb11u1 || =102.5.0esr-1 || =102.5.0esr-1~deb10u1 || =102.5.0esr-1~deb11u1 || =102.6.0esr-1 || =102.6.0esr-1~deb10u1 || =102.6.0esr-1~deb11u1 || =102.7.0esr-1 || =102.7.0esr-1~deb10u1 || =102.7.0esr-1~deb11u1 || =102.8.0esr-1 || =102.8.0esr-1~deb10u1 || =102.8.0esr-1~deb11u1 || =102.9.0esr-1 || =102.9.0esr-1~deb10u1 || =102.9.0esr-1~deb11u1 || =102.9.0esr-2 || =115.0.2esr-1 || =115.1.0esr-1 || =115.10.0esr-1 || =115.10.0esr-1~deb10u1 || =115.10.0esr-1~deb11u1 || =115.10.0esr-1~deb12u1 || =115.11.0esr-1~deb10u1 || =115.2.0esr-1 || =115.2.1esr-1 || =115.3.0esr-1 || =115.3.0esr-1~deb10u1 || =115.3.0esr-1~deb11u1 || =115.3.0esr-1~deb12u1 || =115.3.1esr-1~deb10u1 || =115.3.1esr-1~deb11u1 || =115.4.0esr-1 || =115.4.0esr-1~deb10u1 || =115.4.0esr-1~deb11u1 || =115.4.0esr-1~deb12u1 || =115.5.0esr-1 || =115.5.0esr-1~deb10u1 || =115.5.0esr-1~deb11u1 || =115.5.0esr-1~deb12u1 || =115.6.0esr-1 || =115.6.0esr-1~deb10u1 || =115.6.0esr-1~deb11u1 || =115.6.0esr-1~deb12u1 || =115.7.0esr-1 || =115.7.0esr-1~deb10u1 || =115.7.0esr-1~deb11u1 || =115.7.0esr-1~deb12u1 || =115.8.0esr-1 || =115.8.0esr-1~deb10u1 || =115.8.0esr-1~deb11u1 || =115.8.0esr-1~deb12u1 || =115.9.0esr-1 || =115.9.0esr-1~deb11u1 || =115.9.0esr-1~deb12u1 || =115.9.0esr-2 || =115.9.1esr-1 || =115.9.1esr-1~deb10u1 || =115.9.1esr-1~deb11u1 || =115.9.1esr-1~deb12u1 || =78.12.0esr-1 || =78.13.0esr-1 || =78.13.0esr-1~deb10u1 || =78.13.0esr-1~deb11u1 || =78.13.0esr-1~deb9u1 || =78.14.0esr-1 || =78.14.0esr-1~deb10u1 || =78.14.0esr-1~deb11u1 || =78.14.0esr-1~deb9u1 || =78.15.0esr-1~deb10u1 || =78.15.0esr-1~deb11u1 || =78.15.0esr-1~deb9u1 || =91.0.1esr-1 || =91.0esr-1 || =91.1.0esr-1 || =91.10.0esr-1 || =91.10.0esr-1~deb10u1 || =91.10.0esr-1~deb11u1 || =91.10.0esr-1~deb9u1 || =91.11.0esr-1 || =91.11.0esr-1~deb10u1 || =91.11.0esr-1~deb11u1 || =91.11.0esr-1~deb9u1 || =91.12.0esr-1 || =91.12.0esr-1~deb10u1 || =91.12.0esr-1~deb11u1 || =91.13.0esr-1~deb10u1 || =91.13.0esr-1~deb11u1 || =91.2.0esr-1 || =91.3.0esr-1 || =91.3.0esr-2 || =91.4.0esr-1 || =91.4.1esr-1~deb11u1 || =91.4.1esr-1~deb9u1 || =91.5.0esr-1 || =91.5.0esr-1~deb10u1 || =91.5.0esr-1~deb11u1 || =91.5.0esr-1~deb9u1 || =91.5.1esr-1 || =91.6.0esr-1 || =91.6.0esr-1~deb10u1 || =91.6.0esr-1~deb11u1 || =91.6.0esr-1~deb9u1 || =91.6.1esr-1 || =91.6.1esr-1~deb10u1 || =91.6.1esr-1~deb11u1 || =91.6.1esr-1~deb9u1 || =91.7.0esr-1 || =91.7.0esr-1~deb10u1 || =91.7.0esr-1~deb11u1 || =91.7.0esr-1~deb9u1 || =91.8.0esr-1 || =91.8.0esr-1~deb10u1 || =91.8.0esr-1~deb11u1 || =91.8.0esr-1~deb9u1 || =91.9.0esr-1 || =91.9.0esr-1~deb10u1 || =91.9.0esr-1~deb11u1 || =91.9.0esr-1~deb9u1 || =91.9.1esr-1 || =91.9.1esr-1~deb10u1 || =91.9.1esr-1~deb11u1 || =91.9.1esr-1~deb9u1 || >=0 <115.11.0esr-1~deb11u1 | 115.11.0esr-1~deb11u1 | |
debian 12 | =102.11.0esr-1 || =102.12.0esr-1 || =102.12.0esr-1~deb10u1 || =102.12.0esr-1~deb11u1 || =102.12.0esr-1~deb12u1 || =102.13.0esr-1 || =102.13.0esr-1~deb10u1 || =102.13.0esr-1~deb11u1 || =102.13.0esr-1~deb12u1 || =102.14.0esr-1~deb10u1 || =102.14.0esr-1~deb11u1 || =102.14.0esr-1~deb12u1 || =102.15.0esr-1~deb10u1 || =102.15.0esr-1~deb11u1 || =102.15.0esr-1~deb12u1 || =102.15.1esr-1~deb10u1 || =102.15.1esr-1~deb11u1 || =102.15.1esr-1~deb12u1 || =115.0.2esr-1 || =115.1.0esr-1 || =115.10.0esr-1 || =115.10.0esr-1~deb10u1 || =115.10.0esr-1~deb11u1 || =115.10.0esr-1~deb12u1 || =115.11.0esr-1~deb10u1 || =115.11.0esr-1~deb11u1 || =115.2.0esr-1 || =115.2.1esr-1 || =115.3.0esr-1 || =115.3.0esr-1~deb10u1 || =115.3.0esr-1~deb11u1 || =115.3.0esr-1~deb12u1 || =115.3.1esr-1~deb10u1 || =115.3.1esr-1~deb11u1 || =115.4.0esr-1 || =115.4.0esr-1~deb10u1 || =115.4.0esr-1~deb11u1 || =115.4.0esr-1~deb12u1 || =115.5.0esr-1 || =115.5.0esr-1~deb10u1 || =115.5.0esr-1~deb11u1 || =115.5.0esr-1~deb12u1 || =115.6.0esr-1 || =115.6.0esr-1~deb10u1 || =115.6.0esr-1~deb11u1 || =115.6.0esr-1~deb12u1 || =115.7.0esr-1 || =115.7.0esr-1~deb10u1 || =115.7.0esr-1~deb11u1 || =115.7.0esr-1~deb12u1 || =115.8.0esr-1 || =115.8.0esr-1~deb10u1 || =115.8.0esr-1~deb11u1 || =115.8.0esr-1~deb12u1 || =115.9.0esr-1 || =115.9.0esr-1~deb11u1 || =115.9.0esr-1~deb12u1 || =115.9.0esr-2 || =115.9.1esr-1 || =115.9.1esr-1~deb10u1 || =115.9.1esr-1~deb11u1 || =115.9.1esr-1~deb12u1 || >=0 <115.11.0esr-1~deb12u1 | 115.11.0esr-1~deb12u1 | |
debian 11 | =14.0.0+dfsg.2-7 || =14.0.0+dfsg.2-7+deb11u1 || >=0 <14.0.0+dfsg.2-7+deb11u2 | 14.0.0+dfsg.2-7+deb11u2 | |
debian 11 | =1:102.0.1-1 || =1:102.0.2-1 || =1:102.0~b4-1 || =1:102.0~b7-1 || =1:102.1.0-1 || =1:102.1.1-1 || =1:102.1.2-1 || =1:102.10.0-1 || =1:102.10.0-1~deb10u1 || =1:102.10.0-1~deb11u1 || =1:102.11.0-1 || =1:102.11.0-1~deb10u1 || =1:102.11.0-1~deb11u1 || =1:102.12.0-1 || =1:102.12.0-1~deb10u1 || =1:102.12.0-1~deb11u1 || =1:102.12.0-1~deb12u1 || =1:102.13.0-1 || =1:102.13.0-1~deb10u1 || =1:102.13.0-1~deb11u1 || =1:102.13.0-1~deb12u1 || =1:102.13.1-1 || =1:102.13.1-1~deb10u1 || =1:102.13.1-1~deb11u1 || =1:102.13.1-1~deb12u1 || =1:102.14.0-1~deb10u1 || =1:102.14.0-1~deb11u1 || =1:102.14.0-1~deb12u1 || =1:102.15.0-1~deb10u1 || =1:102.15.0-1~deb11u1 || =1:102.15.0-1~deb12u1 || =1:102.15.1-1~deb10u1 || =1:102.15.1-1~deb11u1 || =1:102.15.1-1~deb12u1 || =1:102.2.0-1 || =1:102.2.1-1 || =1:102.2.2-1 || =1:102.3.0-1 || =1:102.3.0-1~deb10u1 || =1:102.3.0-1~deb11u1 || =1:102.3.1-1 || =1:102.3.2-1 || =1:102.3.3-1 || =1:102.4.0-1 || =1:102.4.0-1~deb10u1 || =1:102.4.0-1~deb11u1 || =1:102.4.1-1 || =1:102.5.0-1 || =1:102.5.0-1~deb10u1 || =1:102.5.0-1~deb11u1 || =1:102.5.1-1 || =1:102.6.0-1 || =1:102.6.0-1~deb10u1 || =1:102.6.0-1~deb11u1 || =1:102.7.1+1-1 || =1:102.7.1-1 || =1:102.7.2-1 || =1:102.8.0-1 || =1:102.8.0-1~deb10u1 || =1:102.8.0-1~deb11u1 || =1:102.9.0-1 || =1:102.9.0-1~deb10u1 || =1:102.9.0-1~deb11u1 || =1:102.9.1-1 || =1:103.0~b5-1 || =1:104.0~b2-1 || =1:110.0~b4-1 || =1:112.0~b1-1 || =1:113.0~b3-1 || =1:114.0~b2-1 || =1:115.0-1 || =1:115.0.1-1 || =1:115.0.1-2 || =1:115.0~b4-1 || =1:115.0~b6-1 || =1:115.1.0-1 || =1:115.1.1-1 || =1:115.10.1-1 || =1:115.10.1-1~deb10u1 || =1:115.10.1-1~deb11u1 || =1:115.10.1-1~deb12u1 || =1:115.11.0-1~deb10u1 || =1:115.2.0-1 || =1:115.2.2-1 || =1:115.3.0-1 || =1:115.3.0-1~deb12u1 || =1:115.3.1-1 || =1:115.3.1-1~deb10u1 || =1:115.3.1-1~deb11u1 || =1:115.3.1-1~deb12u1 || =1:115.4.1-1 || =1:115.4.1-1~deb10u1 || =1:115.4.1-1~deb11u1 || =1:115.4.1-1~deb12u1 || =1:115.5.0-1 || =1:115.5.0-1~deb10u1 || =1:115.5.0-1~deb11u1 || =1:115.5.0-1~deb12u1 || =1:115.5.1-1 || =1:115.5.2-1 || =1:115.6.0-1 || =1:115.6.0-1~deb10u1 || =1:115.6.0-1~deb11u1 || =1:115.6.0-1~deb12u1 || =1:115.7.0-1 || =1:115.7.0-1~deb10u1 || =1:115.7.0-1~deb11u1 || =1:115.7.0-1~deb12u1 || =1:115.8.0-1 || =1:115.8.0-1~deb10u1 || =1:115.8.0-1~deb11u1 || =1:115.8.0-1~deb12u1 || =1:115.8.1-1 || =1:115.9.0-1 || =1:115.9.0-1~deb10u1 || =1:115.9.0-1~deb11u1 || =1:115.9.0-1~deb12u1 || =1:78.12.0-1 || =1:78.13.0-1 || =1:78.13.0-1~deb10u1 || =1:78.13.0-1~deb11u1 || =1:78.13.0-1~deb9u1 || =1:78.14.0-1 || =1:78.14.0-1~deb10u1 || =1:78.14.0-1~deb11u1 || =1:78.14.0-1~deb9u1 || =1:84.0~b3-1 || =1:85.0~b3-1 || =1:86.0~b3-1 || =1:88.0~b2-1 || =1:89.0~b2-1 || =1:90.0~b2-1 || =1:91.0-1 || =1:91.0.2-1 || =1:91.0~b1-1 || =1:91.0~b3-1 || =1:91.0~b5-1 || =1:91.1.0-1 || =1:91.1.1-1 || =1:91.10.0-1 || =1:91.10.0-1~deb10u1 || =1:91.10.0-1~deb11u1 || =1:91.10.0-1~deb9u1 || =1:91.11.0-1 || =1:91.11.0-1~deb10u1 || =1:91.11.0-1~deb11u1 || =1:91.12.0-1~deb10u1 || =1:91.12.0-1~deb11u1 || =1:91.13.0-1~deb10u1 || =1:91.13.0-1~deb11u1 || =1:91.2.0-1 || =1:91.2.1-1 || =1:91.3.0-1 || =1:91.3.2-1 || =1:91.4.0-1 || =1:91.4.1-1 || =1:91.4.1-1~deb10u1 || =1:91.4.1-1~deb11u1 || =1:91.4.1-1~deb9u1 || =1:91.5.0-1 || =1:91.5.0-1~deb9u1 || =1:91.5.0-2 || =1:91.5.0-2~deb10u1 || =1:91.5.0-2~deb11u1 || =1:91.5.1-1 || =1:91.6.0-1 || =1:91.6.0-1~deb10u1 || =1:91.6.0-1~deb11u1 || =1:91.6.0-1~deb9u1 || =1:91.6.1-1 || =1:91.6.1-1~deb10u1 || =1:91.6.1-1~deb11u1 || =1:91.6.1-1~deb9u1 || =1:91.6.2-1 || =1:91.6.2-1~deb10u1 || =1:91.6.2-1~deb11u1 || =1:91.6.2-1~deb9u1 || =1:91.7.0-1 || =1:91.7.0-2 || =1:91.7.0-2~deb10u1 || =1:91.7.0-2~deb11u1 || =1:91.7.0-2~deb9u1 || =1:91.8.0-1 || =1:91.8.0-1~deb10u1 || =1:91.8.0-1~deb11u1 || =1:91.8.0-1~deb9u1 || =1:91.8.1-1 || =1:91.9.0-1 || =1:91.9.0-1~deb10u1 || =1:91.9.0-1~deb11u1 || =1:91.9.0-1~deb9u1 || >=0 <1:115.11.0-1~deb11u1 | 1:115.11.0-1~deb11u1 | |
debian 12 | =1:102.11.0-1 || =1:102.12.0-1 || =1:102.12.0-1~deb10u1 || =1:102.12.0-1~deb11u1 || =1:102.12.0-1~deb12u1 || =1:102.13.0-1 || =1:102.13.0-1~deb10u1 || =1:102.13.0-1~deb11u1 || =1:102.13.0-1~deb12u1 || =1:102.13.1-1 || =1:102.13.1-1~deb10u1 || =1:102.13.1-1~deb11u1 || =1:102.13.1-1~deb12u1 || =1:102.14.0-1~deb10u1 || =1:102.14.0-1~deb11u1 || =1:102.14.0-1~deb12u1 || =1:102.15.0-1~deb10u1 || =1:102.15.0-1~deb11u1 || =1:102.15.0-1~deb12u1 || =1:102.15.1-1~deb10u1 || =1:102.15.1-1~deb11u1 || =1:102.15.1-1~deb12u1 || =1:103.0~b5-1 || =1:104.0~b2-1 || =1:110.0~b4-1 || =1:112.0~b1-1 || =1:113.0~b3-1 || =1:114.0~b2-1 || =1:115.0-1 || =1:115.0.1-1 || =1:115.0.1-2 || =1:115.0~b4-1 || =1:115.0~b6-1 || =1:115.1.0-1 || =1:115.1.1-1 || =1:115.10.1-1 || =1:115.10.1-1~deb10u1 || =1:115.10.1-1~deb11u1 || =1:115.10.1-1~deb12u1 || =1:115.11.0-1~deb10u1 || =1:115.11.0-1~deb11u1 || =1:115.2.0-1 || =1:115.2.2-1 || =1:115.3.0-1 || =1:115.3.0-1~deb12u1 || =1:115.3.1-1 || =1:115.3.1-1~deb10u1 || =1:115.3.1-1~deb11u1 || =1:115.3.1-1~deb12u1 || =1:115.4.1-1 || =1:115.4.1-1~deb10u1 || =1:115.4.1-1~deb11u1 || =1:115.4.1-1~deb12u1 || =1:115.5.0-1 || =1:115.5.0-1~deb10u1 || =1:115.5.0-1~deb11u1 || =1:115.5.0-1~deb12u1 || =1:115.5.1-1 || =1:115.5.2-1 || =1:115.6.0-1 || =1:115.6.0-1~deb10u1 || =1:115.6.0-1~deb11u1 || =1:115.6.0-1~deb12u1 || =1:115.7.0-1 || =1:115.7.0-1~deb10u1 || =1:115.7.0-1~deb11u1 || =1:115.7.0-1~deb12u1 || =1:115.8.0-1 || =1:115.8.0-1~deb10u1 || =1:115.8.0-1~deb11u1 || =1:115.8.0-1~deb12u1 || =1:115.8.1-1 || =1:115.9.0-1 || =1:115.9.0-1~deb10u1 || =1:115.9.0-1~deb11u1 || =1:115.9.0-1~deb12u1 || >=0 <1:115.11.0-1~deb12u1 | 1:115.11.0-1~deb12u1 | |
debian 13 | >=0 <1:115.11.0-1 | 1:115.11.0-1 | |
debian 14 | >=0 <1:115.11.0-1 | 1:115.11.0-1 | |
 npm | >=0 <4.2.67 | 4.2.67 |
1-10 of 41
10
Aliases
References
1. https://github.com/LOURC0D3/CVE-2024-4367-PoC2. https://github.com/mozilla/pdf.js/security/advisories/GHSA-wgrm-67xf-hhpq3. https://github.com/gogs/gogs/issues/79284. https://github.com/mozilla/pdf.js/pull/180155. https://github.com/mozilla/pdf.js/commit/85e64b5c16c9aaef738f421733c12911a441cec66. https://bugzilla.mozilla.org/show_bug.cgi?id=18936457. https://cert-portal.siemens.com/productcert/html/ssa-827383.html8. https://codeanlabs.com/blog/research/cve-2024-4367-arbitrary-js-execution-in-pdf-js9. https://github.com/mozilla/pdf.js/releases/tag/v4.2.6710. https://www.exploit-db.com/exploits/5227311. https://www.mozilla.org/security/advisories/mfsa2024-2112. https://www.mozilla.org/security/advisories/mfsa2024-2213. https://www.mozilla.org/security/advisories/mfsa2024-2314. http://seclists.org/fulldisclosure/2024/Aug/30
Does your application use this vulnerable software?
During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.