Live
- Three persons admitted to hospital for diarrhea treatment
- First Star Outside Milky Way Captured: WOH G64 is 2,000 Times Larger Than the Sun
- Sikkim govt to constitute state Niti Ayog: CM Tamang
- CBI books Rajasthan narcotics inspector for Rs 3 lakh bribe
- Rajasthan bypolls: A tough contest between BJP and Congress
- Albania joins SEPA, paving way for EU integration
- Japanese government approves 250-billion USD economic package to ease price pain
- Six pharma companies to set up their units in Telangana
- The Unstable Events of a 17-Wicket Day in Perth: India vs Australia
- Dutch FM's Israel trip cancelled after Netanyahu's arrest warrant
CERT-In warns users of multiple bugs in Android, Mozilla Firefox
The Indian Computer Emergency Response Team (CERT-In), which comes under the Ministry of Electronics & Information Technology
New Delhi: The Indian Computer Emergency Response Team (CERT-In), which comes under the Ministry of Electronics & Information Technology, on Wednesday warned users of multiple vulnerabilities in Android and Mozilla Firefox web browsers which could allow an attacker to obtain sensitive information, execute arbitrary code and cause Denial-of-Service conditions on the targeted system.
As per the advisory, 'Android 12, 12L, 13, 14', and 'Mozilla Firefox versions prior to 124.0.1 and Mozilla Firefox ESR versions before 115.9.1' are the affected software versions, respectively.
"Successful exploitation of these vulnerabilities could allow the attacker to obtain sensitive information, gain elevated privileges and cause a denial-of-service condition on the targeted system," said the CERT-In advisory.
In Android, these vulnerabilities exist due to flaws in the Framework, System, MediaTek components, Widevine, Qualcomm components and Qualcomm closed-source components.
In Mozilla Firefox, these vulnerabilities exist due to out-of-bounds access via Range Analysis bypass and Privileged JavaScript Execution via Event Handlers.
The cyber agency advised users to apply appropriate updates when available.
Meanwhile, CERT-In has warned users of vulnerability in Apple products such as iPhones, MacBooks, iPads, and others.
According to the cyber agency, a remote attacker could exploit this vulnerability by persuading a victim to visit specially-crafted request.
This vulnerability exists in Apple Products due to out-of-bounds write issues in WebRTC and CoreMedia, it added.
