Cloudanix VulnDB

CVE-2024-0746

Medium · 6.5

CVSS

6.5

EPSS

0.7%

Published

Jan 23, 2024

CISA due date

—

Cloudanix analysis

Monitor only SSVC: Track

A problem in the browser could make it suddenly close when someone tries to preview a page for printing on Linux computers.

Exploitation
Requires User Interaction
Attacker needs
User Interaction
Complexity
Low
Impact
Denial Of Service
Component
Application
Class
Denial of service
Remediation
Upgrade
Effort
Medium
Patch risk
Low

What it actually does

Opening the print preview dialog on Linux triggers an unhandled condition that terminates the browser process, resulting in denial of service with no impact on confidentiality or integrity.

Why it matters to the business

Users experience sudden application termination while performing routine printing tasks, leading to lost work, workflow interruptions, and increased support volume on affected Linux deployments.

How an attack unfolds

An attacker hosts content on a web page or email attachment; a Linux user visits the page or opens the attachment and invokes the print preview dialog, causing the browser or Thunderbird to crash.

How to fix it

Upgrade Firefox to version 122 or later, Firefox ESR to 115.7 or later, and Thunderbird to 115.7 or later. Apply the corresponding Debian security updates once available for the distribution release in use.

How to confirm the fix worked

Query the browser about:config or Help > About dialog to confirm the running version meets or exceeds the fixed releases; retest print-preview functionality on Linux after the upgrade.

Typical attack path

  1. Attacker prepares and hosts content that triggers the print-preview code path
  2. Victim on Linux opens the content in an affected browser or Thunderbird
  3. Victim selects print preview from the menu or keyboard shortcut
  4. Browser process terminates unexpectedly

How to detect it

Review browser crash logs and system journal entries on Linux for unexpected terminations immediately following print-preview invocation; correlate with web-request logs to identify the triggering content.

  • firefox crash in print preview
  • MOZ_CRASH in nsPrintEngine
  • Process terminated with signal 11 while handling print dialog

What your security team should do

  • Prioritize patching all Linux endpoints running affected Firefox, ESR, or Thunderbird versions within the next patch cycle
  • Communicate the availability of updates to end users and encourage immediate installation
  • Monitor crash-reporting telemetry for spikes in print-preview related terminations until patching is complete

The record

A Linux user opening the print preview dialog could have caused the browser to crash. This vulnerability affects Firefox < 122, Firefox ESR < 115.7, and Thunderbird < 115.7.

Affected packages

Ecosystem Package Introduced Fixed
AlmaLinux:8 firefox 0 115.7.0-1.el8_9.alma.1
AlmaLinux:8 thunderbird 0 115.7.0-1.el8_9.alma.1
AlmaLinux:9 firefox 0 115.7.0-1.el9_3.alma
AlmaLinux:9 firefox-x11 0 115.7.0-1.el9_3.alma
AlmaLinux:9 thunderbird 0 115.7.0-1.el9_3.alma
Debian:10 firefox-esr 0 115.7.0esr-1~deb10u1
Debian:10 thunderbird 0 1:115.7.0-1~deb10u1
Debian:11 firefox-esr 0 115.7.0esr-1~deb11u1
Debian:11 thunderbird 0 1:115.7.0-1~deb11u1
Debian:12 firefox-esr 0 115.7.0esr-1~deb12u1
Debian:12 thunderbird 0 1:115.7.0-1~deb12u1
Debian:13 firefox-esr 0 115.7.0esr-1
Debian:13 thunderbird 0 1:115.7.0-1
Mageia:9 firefox 0 115.7.0-1.mga9
Mageia:9 firefox-l10n 0 115.7.0-1.mga9
Mageia:9 nss 0 3.97.0-1.mga9
Mageia:9 thunderbird 0 115.7.0-1.mga9
Mageia:9 thunderbird-l10n 0 115.7.0-1.mga9
Red Hat:enterprise_linux:7::client firefox 0 0:115.7.0-1.el7_9
Red Hat:enterprise_linux:7::client firefox-debuginfo 0 0:115.7.0-1.el7_9
Red Hat:enterprise_linux:7::client thunderbird 0 0:115.7.0-1.el7_9
Red Hat:enterprise_linux:7::client thunderbird-debuginfo 0 0:115.7.0-1.el7_9
Red Hat:enterprise_linux:7::server firefox 0 0:115.7.0-1.el7_9
Red Hat:enterprise_linux:7::server firefox-debuginfo 0 0:115.7.0-1.el7_9
Red Hat:enterprise_linux:7::server thunderbird 0 0:115.7.0-1.el7_9
Red Hat:enterprise_linux:7::server thunderbird-debuginfo 0 0:115.7.0-1.el7_9
Red Hat:enterprise_linux:7::workstation firefox 0 0:115.7.0-1.el7_9
Red Hat:enterprise_linux:7::workstation firefox-debuginfo 0 0:115.7.0-1.el7_9
Red Hat:enterprise_linux:7::workstation thunderbird 0 0:115.7.0-1.el7_9
Red Hat:enterprise_linux:7::workstation thunderbird-debuginfo 0 0:115.7.0-1.el7_9
Red Hat:enterprise_linux:8::appstream firefox 0 0:115.7.0-1.el8_9
Red Hat:enterprise_linux:8::appstream firefox-debuginfo 0 0:115.7.0-1.el8_9
Red Hat:enterprise_linux:8::appstream firefox-debugsource 0 0:115.7.0-1.el8_9
Red Hat:enterprise_linux:8::appstream thunderbird 0 0:115.7.0-1.el8_9
Red Hat:enterprise_linux:8::appstream thunderbird-debuginfo 0 0:115.7.0-1.el8_9
Red Hat:enterprise_linux:8::appstream thunderbird-debugsource 0 0:115.7.0-1.el8_9
Red Hat:enterprise_linux:9::appstream firefox 0 0:115.7.0-1.el9_3
Red Hat:enterprise_linux:9::appstream firefox-debuginfo 0 0:115.7.0-1.el9_3
Red Hat:enterprise_linux:9::appstream firefox-debugsource 0 0:115.7.0-1.el9_3
Red Hat:enterprise_linux:9::appstream firefox-x11 0 0:115.7.0-1.el9_3
Red Hat:enterprise_linux:9::appstream thunderbird 0 0:115.7.0-1.el9_3
Red Hat:enterprise_linux:9::appstream thunderbird-debuginfo 0 0:115.7.0-1.el9_3
Red Hat:enterprise_linux:9::appstream thunderbird-debugsource 0 0:115.7.0-1.el9_3
Red Hat:rhel_aus:8.2::appstream firefox 0 0:115.7.0-1.el8_2
Red Hat:rhel_aus:8.2::appstream firefox-debuginfo 0 0:115.7.0-1.el8_2
Red Hat:rhel_aus:8.2::appstream firefox-debugsource 0 0:115.7.0-1.el8_2
Red Hat:rhel_aus:8.2::appstream thunderbird 0 0:115.7.0-1.el8_2
Red Hat:rhel_aus:8.2::appstream thunderbird-debuginfo 0 0:115.7.0-1.el8_2
Red Hat:rhel_aus:8.2::appstream thunderbird-debugsource 0 0:115.7.0-1.el8_2
Red Hat:rhel_aus:8.4::appstream firefox 0 0:115.7.0-1.el8_4
Red Hat:rhel_aus:8.4::appstream firefox-debuginfo 0 0:115.7.0-1.el8_4
Red Hat:rhel_aus:8.4::appstream firefox-debugsource 0 0:115.7.0-1.el8_4
Red Hat:rhel_aus:8.4::appstream thunderbird 0 0:115.7.0-1.el8_4
Red Hat:rhel_aus:8.4::appstream thunderbird-debuginfo 0 0:115.7.0-1.el8_4
Red Hat:rhel_aus:8.4::appstream thunderbird-debugsource 0 0:115.7.0-1.el8_4
Red Hat:rhel_e4s:8.2::appstream firefox 0 0:115.7.0-1.el8_2
Red Hat:rhel_e4s:8.2::appstream firefox-debuginfo 0 0:115.7.0-1.el8_2
Red Hat:rhel_e4s:8.2::appstream firefox-debugsource 0 0:115.7.0-1.el8_2
Red Hat:rhel_e4s:8.2::appstream thunderbird 0 0:115.7.0-1.el8_2
Red Hat:rhel_e4s:8.2::appstream thunderbird-debuginfo 0 0:115.7.0-1.el8_2
Red Hat:rhel_e4s:8.2::appstream thunderbird-debugsource 0 0:115.7.0-1.el8_2
Red Hat:rhel_e4s:8.4::appstream firefox 0 0:115.7.0-1.el8_4
Red Hat:rhel_e4s:8.4::appstream firefox-debuginfo 0 0:115.7.0-1.el8_4
Red Hat:rhel_e4s:8.4::appstream firefox-debugsource 0 0:115.7.0-1.el8_4
Red Hat:rhel_e4s:8.4::appstream thunderbird 0 0:115.7.0-1.el8_4
Red Hat:rhel_e4s:8.4::appstream thunderbird-debuginfo 0 0:115.7.0-1.el8_4
Red Hat:rhel_e4s:8.4::appstream thunderbird-debugsource 0 0:115.7.0-1.el8_4
Red Hat:rhel_eus:8.6::appstream firefox 0 0:115.7.0-1.el8_6
Red Hat:rhel_eus:8.6::appstream firefox-debuginfo 0 0:115.7.0-1.el8_6
Red Hat:rhel_eus:8.6::appstream firefox-debugsource 0 0:115.7.0-1.el8_6
Red Hat:rhel_eus:8.6::appstream thunderbird 0 0:115.7.0-1.el8_6
Red Hat:rhel_eus:8.6::appstream thunderbird-debuginfo 0 0:115.7.0-1.el8_6
Red Hat:rhel_eus:8.6::appstream thunderbird-debugsource 0 0:115.7.0-1.el8_6
Red Hat:rhel_eus:8.8::appstream firefox 0 0:115.7.0-1.el8_8
Red Hat:rhel_eus:8.8::appstream firefox-debuginfo 0 0:115.7.0-1.el8_8
Red Hat:rhel_eus:8.8::appstream firefox-debugsource 0 0:115.7.0-1.el8_8
Red Hat:rhel_eus:8.8::appstream thunderbird 0 0:115.7.0-1.el8_8
Red Hat:rhel_eus:8.8::appstream thunderbird-debuginfo 0 0:115.7.0-1.el8_8
Red Hat:rhel_eus:8.8::appstream thunderbird-debugsource 0 0:115.7.0-1.el8_8
Red Hat:rhel_eus:9.0::appstream firefox 0 0:115.7.0-1.el9_0
Red Hat:rhel_eus:9.0::appstream firefox-debuginfo 0 0:115.7.0-1.el9_0
Red Hat:rhel_eus:9.0::appstream firefox-debugsource 0 0:115.7.0-1.el9_0
Red Hat:rhel_eus:9.0::appstream thunderbird 0 0:115.7.0-1.el9_0
Red Hat:rhel_eus:9.0::appstream thunderbird-debuginfo 0 0:115.7.0-1.el9_0
Red Hat:rhel_eus:9.0::appstream thunderbird-debugsource 0 0:115.7.0-1.el9_0
Red Hat:rhel_eus:9.2::appstream firefox 0 0:115.7.0-1.el9_2
Red Hat:rhel_eus:9.2::appstream firefox-debuginfo 0 0:115.7.0-1.el9_2
Red Hat:rhel_eus:9.2::appstream firefox-debugsource 0 0:115.7.0-1.el9_2
Red Hat:rhel_eus:9.2::appstream firefox-x11 0 0:115.7.0-1.el9_2
Red Hat:rhel_eus:9.2::appstream thunderbird 0 0:115.7.0-1.el9_2
Red Hat:rhel_eus:9.2::appstream thunderbird-debuginfo 0 0:115.7.0-1.el9_2
Red Hat:rhel_eus:9.2::appstream thunderbird-debugsource 0 0:115.7.0-1.el9_2
Red Hat:rhel_tus:8.2::appstream firefox 0 0:115.7.0-1.el8_2
Red Hat:rhel_tus:8.2::appstream firefox-debuginfo 0 0:115.7.0-1.el8_2
Red Hat:rhel_tus:8.2::appstream firefox-debugsource 0 0:115.7.0-1.el8_2
Red Hat:rhel_tus:8.2::appstream thunderbird 0 0:115.7.0-1.el8_2
Red Hat:rhel_tus:8.2::appstream thunderbird-debuginfo 0 0:115.7.0-1.el8_2
Red Hat:rhel_tus:8.2::appstream thunderbird-debugsource 0 0:115.7.0-1.el8_2
Red Hat:rhel_tus:8.4::appstream firefox 0 0:115.7.0-1.el8_4
Red Hat:rhel_tus:8.4::appstream firefox-debuginfo 0 0:115.7.0-1.el8_4
Red Hat:rhel_tus:8.4::appstream firefox-debugsource 0 0:115.7.0-1.el8_4
Red Hat:rhel_tus:8.4::appstream thunderbird 0 0:115.7.0-1.el8_4
Red Hat:rhel_tus:8.4::appstream thunderbird-debuginfo 0 0:115.7.0-1.el8_4
Red Hat:rhel_tus:8.4::appstream thunderbird-debugsource 0 0:115.7.0-1.el8_4
Rocky Linux:8 firefox 0 0:115.7.0-1.el8_9
Rocky Linux:8 thunderbird 0 0:115.7.0-1.el8_9
SUSE:Enterprise Storage 7.1 MozillaFirefox 0 115.7.0-150200.152.123.1
SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS MozillaFirefox 0 115.7.0-150000.150.122.1
SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS MozillaFirefox 0 115.7.0-150200.152.123.1
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS MozillaFirefox 0 115.7.0-150200.152.123.1
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS MozillaFirefox 0 115.7.0-150200.152.123.1
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS MozillaFirefox 0 115.7.0-150200.152.123.1
SUSE:Linux Enterprise Module for Desktop Applications 15 SP5 MozillaFirefox 0 115.7.0-150200.152.123.1
SUSE:Linux Enterprise Module for Package Hub 15 SP5 MozillaThunderbird 0 115.7.0-150200.8.145.1
SUSE:Linux Enterprise Server 12 SP5 MozillaFirefox 0 115.7.0-112.197.1
SUSE:Linux Enterprise Server 15 SP1-LTSS MozillaFirefox 0 115.7.0-150000.150.122.1
SUSE:Linux Enterprise Server 15 SP2-LTSS MozillaFirefox 0 115.7.0-150200.152.123.1
SUSE:Linux Enterprise Server 15 SP3-LTSS MozillaFirefox 0 115.7.0-150200.152.123.1
SUSE:Linux Enterprise Server 15 SP4-LTSS MozillaFirefox 0 115.7.0-150200.152.123.1
SUSE:Linux Enterprise Server for SAP Applications 12 SP5 MozillaFirefox 0 115.7.0-112.197.1
SUSE:Linux Enterprise Server for SAP Applications 15 SP1 MozillaFirefox 0 115.7.0-150000.150.122.1
SUSE:Linux Enterprise Server for SAP Applications 15 SP2 MozillaFirefox 0 115.7.0-150200.152.123.1
SUSE:Linux Enterprise Server for SAP Applications 15 SP3 MozillaFirefox 0 115.7.0-150200.152.123.1
SUSE:Linux Enterprise Server for SAP Applications 15 SP4 MozillaFirefox 0 115.7.0-150200.152.123.1
SUSE:Linux Enterprise Software Development Kit 12 SP5 MozillaFirefox 0 115.7.0-112.197.1
SUSE:Linux Enterprise Workstation Extension 15 SP5 MozillaThunderbird 0 115.7.0-150200.8.145.1
Ubuntu:18.04:LTS mozjs38 0 No fix
Ubuntu:18.04:LTS mozjs52 0 No fix
Ubuntu:20.04:LTS firefox 0 122.0+build2-0ubuntu0.20.04.1
Ubuntu:20.04:LTS mozjs52 0 No fix
Ubuntu:20.04:LTS mozjs68 0 No fix
Ubuntu:20.04:LTS thunderbird 0 1:115.8.1+build1-0ubuntu0.20.04.1
Ubuntu:22.04:LTS mozjs102 0 No fix
Ubuntu:22.04:LTS mozjs78 0 No fix
Ubuntu:22.04:LTS mozjs91 0 No fix
Ubuntu:22.04:LTS thunderbird 0 1:115.8.1+build1-0ubuntu0.22.04.1
Ubuntu:23.10 thunderbird 0 1:115.8.1+build1-0ubuntu0.23.10.1
Ubuntu:24.04:LTS mozjs102 0 No fix
Ubuntu:Pro:18.04:LTS mozjs38 0 No fix
Ubuntu:Pro:18.04:LTS mozjs52 0 No fix
Ubuntu:Pro:20.04:LTS mozjs52 0 No fix
Ubuntu:Pro:20.04:LTS mozjs68 0 No fix
Ubuntu:Pro:22.04:LTS mozjs78 0 No fix
Ubuntu:Pro:24.04:LTS mozjs102 0 No fix
openSUSE:Leap 15.5 MozillaFirefox 0 115.7.0-150200.152.123.1
openSUSE:Leap 15.5 MozillaThunderbird 0 115.7.0-150200.8.145.1
openSUSE:Tumbleweed MozillaFirefox 0 122.0-1.1
openSUSE:Tumbleweed MozillaThunderbird 0 115.7.0-1.1
openSUSE:Tumbleweed firefox-esr 0 128.5.1-1.1

Related vulnerabilities