Vulnerability CVE-2024-2609: Information

Description

The permission prompt input delay could expire while the window is not in focus. This makes it vulnerable to clickjacking by malicious websites. This vulnerability affects Firefox < 124, Firefox ESR < 115.10, and Thunderbird < 115.10.

URL: https://nvd.nist.gov/vuln/detail/CVE-2024-2609
Published: March 19, 2024
Modified: April 22, 2024

Fixed packages

Package name
Branch
Fixed in version
Version from repository
Errata ID
Task #
State
firefoxsisyphus124.0-alt1126.0-alt2ALT-PU-2024-4271-2343190Fixed
firefoxsisyphus_riscv64124.0.1-alt0.port126.0-alt0.portALT-PU-2024-6052-1-Fixed
firefoxsisyphus_loongarch64124.0-alt1.0.port126.0-alt1.0.portALT-PU-2024-4597-1-Fixed
firefox-esrsisyphus115.10.0-alt1115.11.0-alt1ALT-PU-2024-6719-2344912Fixed
firefox-esrsisyphus_loongarch64115.10.0-alt1115.11.0-alt1ALT-PU-2024-6794-1-Fixed
firefox-esrp10115.10.0-alt1115.10.0-alt1ALT-PU-2024-6721-3345277Fixed

References to Advisories, Solutions, and Tools

Hyperlink
Resource
https://bugzilla.mozilla.org/show_bug.cgi?id=1866100
    https://www.mozilla.org/security/advisories/mfsa2024-12/
      https://www.mozilla.org/security/advisories/mfsa2024-19/
        https://lists.debian.org/debian-lts-announce/2024/04/msg00012.html
          https://www.mozilla.org/security/advisories/mfsa2024-20/
            https://lists.debian.org/debian-lts-announce/2024/04/msg00013.html
              VKontakte|Telegram|YouTube|Forum|GitHub|Bugzilla
              Version: v24.5.1
              Back to top