CERT-In warns users of multiple bugs in Android, Mozilla Firefox – ETTelecom

1 minute, 15 seconds Read

New Delhi: The Indian Computer Emergency Response Team (CERT-In), which comes under the Ministry of Electronics & Information Technology, on Wednesday warned users of multiple vulnerabilities in Android and Mozilla Firefox web browsers which could allow an attacker to obtain sensitive information, execute arbitrary code and cause Denial-of-Service conditions on the targeted system.

As per the advisory, ‘Android 12, 12L, 13, 14’, and ‘Mozilla Firefox versions prior to 124.0.1 and Mozilla Firefox ESR versions before 115.9.1’ are the affected software versions, respectively.

“Successful exploitation of these vulnerabilities could allow the attacker to obtain sensitive information, gain elevated privileges and cause a denial-of-service condition on the targeted system,” said the CERT-In advisory.

In Android, these vulnerabilities exist due to flaws in the Framework, System, MediaTek components, Widevine, Qualcomm components and Qualcomm closed-source components.

Ads


Sponsor A War Children Today: 
SaveWorldChildren.org

In Mozilla Firefox, these vulnerabilities exist due to out-of-bounds access via Range Analysis bypass and Privileged JavaScript Execution via Event Handlers.

The cyber agency advised users to apply appropriate updates when available.

Meanwhile, CERT-In has warned users of vulnerability in Apple products such as iPhones, MacBooks, iPads, and others.

According to the cyber agency, a remote attacker could exploit this vulnerability by persuading a victim to visit specially-crafted request.

This vulnerability exists in Apple Products due to out-of-bounds write issues in WebRTC and CoreMedia, it added.

  • Published On Apr 3, 2024 at 08:13 PM IST

Join the community of 2M+ industry professionals

Subscribe to our newsletter to get latest insights & analysis.

Download ETTelecom App

  • Get Realtime updates
  • Save your favourite articles


Scan to download App


This post was originally published on 3rd party site mentioned in the title this site

Similar Posts