Vulnerability identifier: #VU13479
Vulnerability risk: High
Exploitation vector: Network
Exploit availability: No
Client/Desktop applications / Web browsers
The vulnerability allows a remote attacker to execute arbitrary code on the target system.
The vulnerability exists due to use-after-free vulnerability when deleting an
input element during a mutation event handler triggered by focusing that element. A remote unauthenticated attacker can trick the victim into visiting a specially crafted website, trigger memory corruption and execute arbitrary code with elevated privileges.
Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.
Update to version 61.0.
Vulnerable software versions
Mozilla Firefox: 60.0 - 60.0.2
Can this vulnerability be exploited remotely?
Is there known malware, which exploits this vulnerability?