[{"vendor":"mozilla","product":"firefox","defaultStatus":"unknown","cpes":["cpe:2.3:a:mozilla:firefox:-:*:*:*:*:*:*:*"],"versions":[{"version":"0","lessThan":"133","versionType":"custom","status":"affected"}]},{"vendor":"mozilla","product":"firefox_esr","defaultStatus":"unknown","cpes":["cpe:2.3:a:mozilla:firefox_esr:-:*:*:*:*:*:*:*"],"versions":[{"version":"0","lessThan":"128.5","versionType":"custom","status":"affected"}]},{"vendor":"mozilla","product":"thunderbird","defaultStatus":"unknown","cpes":["cpe:2.3:a:mozilla:thunderbird:-:*:*:*:*:*:*:*"],"versions":[{"version":"0","lessThan":"133","versionType":"custom","status":"affected"},{"version":"0","lessThan":"128.5","versionType":"custom","status":"affected"}]}]

{"timestamp":"2024-12-02T17:02:13.730343Z","id":"CVE-2024-11696","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}

[{"vendor":"Mozilla","product":"Firefox","versions":[{"version":"unspecified","lessThan":"133","versionType":"custom","status":"affected"}]},{"vendor":"Mozilla","product":"Firefox ESR","versions":[{"version":"unspecified","lessThan":"128.5","versionType":"custom","status":"affected"}]},{"vendor":"Mozilla","product":"Thunderbird","versions":[{"version":"unspecified","lessThan":"133","versionType":"custom","status":"affected"}]},{"vendor":"Mozilla","product":"Thunderbird","versions":[{"version":"unspecified","lessThan":"128.5","versionType":"custom","status":"affected"}]}]

https://lists.debian.org/debian-lts-announce/2024/11/msg00029.html

OR
          *cpe:2.3:a:mozilla:firefox:*:*:*:*:esr:*:*:* versions up to (excluding) 128.5.0
          *cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:* versions up to (excluding) 128.5.0
          *cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:* versions from (including) 129.0 up to (excluding) 133.0
          *cpe:2.3:a:mozilla:firefox:*:*:*:*:-:*:*:* versions up to (excluding) 133.0

Mozilla Corporation: https://bugzilla.mozilla.org/show_bug.cgi?id=1929600 Types: Issue Tracking

Mozilla Corporation: https://www.mozilla.org/security/advisories/mfsa2024-63/ Types: Vendor Advisory

Mozilla Corporation: https://www.mozilla.org/security/advisories/mfsa2024-64/ Types: Vendor Advisory

Mozilla Corporation: https://www.mozilla.org/security/advisories/mfsa2024-67/ Types: Vendor Advisory

Mozilla Corporation: https://www.mozilla.org/security/advisories/mfsa2024-68/ Types: Vendor Advisory

AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

CWE-347

The application failed to account for exceptions thrown by the `loadManifestFromFile` method during add-on signature verification. This flaw, triggered by an invalid or unsupported extension manifest, could have caused runtime errors that disrupted the signature validation process. As a result, the enforcement of signature validation for unrelated add-ons may have been bypassed.  Signature validation in this context is used to ensure that third-party applications on the user's computer have not tampered with the user's extensions, limiting the impact of this issue. This vulnerability affects Firefox < 133, Firefox ESR < 128.5, Thunderbird < 133, and Thunderbird < 128.5.

https://bugzilla.mozilla.org/show_bug.cgi?id=1929600

https://www.mozilla.org/security/advisories/mfsa2024-63/

https://www.mozilla.org/security/advisories/mfsa2024-64/

https://www.mozilla.org/security/advisories/mfsa2024-67/

https://www.mozilla.org/security/advisories/mfsa2024-68/