Mozilla fixes Firefox zero-day actively exploited in attacks
bleepingcomputer.com
Mozilla fixes Firefox zero-day actively exploited in attacks
1–10 of 151 posts
Re: Mozilla fixes Firefox zero-day actively exploited in attacks
#2Seems bad. "An attacker was able to achieve code execution in the content process by exploiting a use-after-free in Animation timelines. We have had reports of this vulnerability being exploited in the wild."
See:
- NVD page for CVE-2024-9680: https://nvd.nist.gov/vuln/detail/CVE-2024-9680
- Mozilla security advisory: https://www.mozilla.org/en-US/security/advisories/mfsa2024-5...
Re: Mozilla fixes Firefox zero-day actively exploited in attacks
#3[deleted]
Re: Mozilla fixes Firefox zero-day actively exploited in attacks
#4[deleted]
Re: Mozilla fixes Firefox zero-day actively exploited in attacks
#5It references "Bug 1923344" but when I click the link I get "You are not authorized to access bug 1923344."
Re: Mozilla fixes Firefox zero-day actively exploited in attacks
#6Would Rust and it's memory safety stuff have prevented this?
Re: Mozilla fixes Firefox zero-day actively exploited in attacks
#7Fixed many months ago just being made public now, according to the bug tracker. Why a 7 month delay?
Re: Mozilla fixes Firefox zero-day actively exploited in attacks
#8It references "Bug 1923344" but when I click the link I get "You are not authorized to access bug 1923344."
> It references "Bug 1923344" but when I click the link I get "You are not authorized to access bug 1923344."
They usually make the bug reports public eventually.
Re: Mozilla fixes Firefox zero-day actively exploited in attacks
#9Would Rust and it's memory safety stuff have prevented this?
In some sense, yes. Use-after-free is impossible in safe Rust (if you don't use the unsafe keyword)
Re: Mozilla fixes Firefox zero-day actively exploited in attacks
#10Would Rust and it's memory safety stuff have prevented this?
Java too !