CVE-2024-4367

Published: May 14, 2024Modified: Jun 17, 2026

8.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: NVD

Description

A type check was missing when handling fonts in PDF.js, which would allow arbitrary JavaScript execution in the PDF.js context. This vulnerability affects Firefox < 126, Firefox ESR < 115.11, and Thunderbird < 115.11.

Affected (48)

Products: Mozilla: Firefox, Thunderbird · Debian: Debian Linux · Open Xchange: Open Xchange Appsuite Frontend

2 products

1 product

1 product

Open Xchange Appsuite Frontend

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Mozilla Firefox	Before 126.0
Mozilla Firefox	Before 115.11.0
Mozilla Thunderbird	Before 115.11.0

Configuration B

1 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 10.0

Configuration C

44 vulnerable

Vulnerable Software	Affected Versions
Open Xchange Open Xchange Appsuite Frontend	Before 7.10.6
Open Xchange Open Xchange Appsuite Frontend	Version 7.10.6
Open Xchange Open Xchange Appsuite Frontend	Version 7.10.6 revision10
Open Xchange Open Xchange Appsuite Frontend	Version 7.10.6 revision11
Open Xchange Open Xchange Appsuite Frontend	Version 7.10.6 revision12
Open Xchange Open Xchange Appsuite Frontend	Version 7.10.6 revision13
Open Xchange Open Xchange Appsuite Frontend	Version 7.10.6 revision14
Open Xchange Open Xchange Appsuite Frontend	Version 7.10.6 revision15
Open Xchange Open Xchange Appsuite Frontend	Version 7.10.6 revision16
Open Xchange Open Xchange Appsuite Frontend	Version 7.10.6 revision17
Open Xchange Open Xchange Appsuite Frontend	Version 7.10.6 revision18
Open Xchange Open Xchange Appsuite Frontend	Version 7.10.6 revision19
Open Xchange Open Xchange Appsuite Frontend	Version 7.10.6 revision20
Open Xchange Open Xchange Appsuite Frontend	Version 7.10.6 revision21
Open Xchange Open Xchange Appsuite Frontend	Version 7.10.6 revision22
Open Xchange Open Xchange Appsuite Frontend	Version 7.10.6 revision23
Open Xchange Open Xchange Appsuite Frontend	Version 7.10.6 revision24
Open Xchange Open Xchange Appsuite Frontend	Version 7.10.6 revision25
Open Xchange Open Xchange Appsuite Frontend	Version 7.10.6 revision26
Open Xchange Open Xchange Appsuite Frontend	Version 7.10.6 revision27
Open Xchange Open Xchange Appsuite Frontend	Version 7.10.6 revision28
Open Xchange Open Xchange Appsuite Frontend	Version 7.10.6 revision29
Open Xchange Open Xchange Appsuite Frontend	Version 7.10.6 revision30
Open Xchange Open Xchange Appsuite Frontend	Version 7.10.6 revision31
Open Xchange Open Xchange Appsuite Frontend	Version 7.10.6 revision32
Open Xchange Open Xchange Appsuite Frontend	Version 7.10.6 revision33
Open Xchange Open Xchange Appsuite Frontend	Version 7.10.6 revision34
Open Xchange Open Xchange Appsuite Frontend	Version 7.10.6 revision35
Open Xchange Open Xchange Appsuite Frontend	Version 7.10.6 revision36
Open Xchange Open Xchange Appsuite Frontend	Version 7.10.6 revision37
Open Xchange Open Xchange Appsuite Frontend	Version 7.10.6 revision38
Open Xchange Open Xchange Appsuite Frontend	Version 7.10.6 revision39
Open Xchange Open Xchange Appsuite Frontend	Version 7.10.6 revision3
Open Xchange Open Xchange Appsuite Frontend	Version 7.10.6 revision40
Open Xchange Open Xchange Appsuite Frontend	Version 7.10.6 revision41
Open Xchange Open Xchange Appsuite Frontend	Version 7.10.6 revision42
Open Xchange Open Xchange Appsuite Frontend	Version 7.10.6 revision43
Open Xchange Open Xchange Appsuite Frontend	Version 7.10.6 revision44
Open Xchange Open Xchange Appsuite Frontend	Version 7.10.6 revision4
Open Xchange Open Xchange Appsuite Frontend	Version 7.10.6 revision5
Open Xchange Open Xchange Appsuite Frontend	Version 7.10.6 revision6
Open Xchange Open Xchange Appsuite Frontend	Version 7.10.6 revision7
Open Xchange Open Xchange Appsuite Frontend	Version 7.10.6 revision8
Open Xchange Open Xchange Appsuite Frontend	Version 7.10.6 revision9