description: The `nsWindow::PickerOpen(void)` method was susceptible to a heap buffer overflow when running in headless mode. This vulnerability affects Firefox ESR < 115.6, Thunderbird < 115.6, and Firefox < 121.
problem types: Heap buffer overflow affected nsWindow::PickerOpen(void) in headless mode
affected:
{
product: Firefox ESR
vendor: Mozilla
versions:
lessThan: 115.6, status: affected, version: unspecified, versionType: custom
}
{
product: Thunderbird
vendor: Mozilla
versions:
lessThan: 115.6, status: affected, version: unspecified, versionType: custom
}
{
product: Firefox
vendor: Mozilla
versions:
lessThan: 121, status: affected, version: unspecified, versionType: custom
}
