DeutschShown in its original language — a full translation is planned for a future version.
Mozilla Produkte: Mehrere Schwachstellen
view advisory published 2022-06-28
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Mozilla Firefox, Mozilla Firefox ESR und Mozilla Thunderbird ausnutzen, um beliebigen Programmcode auszuführen, einen Denial of Service Zustand durchzuführen, Informationen offenzulegen, Dateien zu manipulieren oder Sicherheitsvorkehrungen zu umgehen.
01
describes (20)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2022-34485US | critical9.8 | — | ||
Mozilla developers Bryce Seager van Dyk and the Mozilla Fuzzing Team reported potential vulnerabilities present in Firefox 101. Some of these bugs showed evidence of memory corrupt… | ||||
| CVE-2022-34484US | high8.8 | — | ||
The Mozilla Fuzzing Team reported potential vulnerabilities present in Thunderbird 91.10. Some of these bugs showed evidence of memory corruption and we presume that with enough ef… | ||||
| CVE-2022-34483US | high8.8 | — | ||
An attacker who could have convinced a user to drag and drop an image to a filesystem could have manipulated the resulting filename to contain an executable extension, and by exten… | ||||
| CVE-2022-34482US | high8.8 | — | ||
An attacker who could have convinced a user to drag and drop an image to a filesystem could have manipulated the resulting filename to contain an executable extension, and by exten… | ||||
| CVE-2022-34481US | high8.8 | — | ||
In the <code>nsTArray_Impl::ReplaceElementsAt()</code> function, an integer overflow could have occurred when the number of elements to replace was too large for the container. Thi… | ||||
| CVE-2022-34480US | high8.8 | — | ||
Within the <code>lg_init()</code> function, if several allocations succeed but then one fails, an uninitialized pointer would have been freed despite never being allocated. This vu… | ||||
| CVE-2022-34479US | medium6.5 | — | ||
A malicious website that could create a popup could have resized the popup to overlay the address bar with its own content, resulting in potential user confusion or spoofing attack… | ||||
| CVE-2022-34478US | medium6.5 | — | ||
The <code>ms-msdt</code>, <code>search</code>, and <code>search-ms</code> protocols deliver content to Microsoft applications, bypassing the browser, when a user accepts a prompt.… | ||||
| CVE-2022-34477US | high7.5 | — | ||
The MediaError message property should be consistent to avoid leaking information about cross-origin resources; however for a same-site cross-origin resource, the message could hav… | ||||
| CVE-2022-34476US | critical9.8 | — | ||
ASN.1 parsing of an indefinite SEQUENCE inside an indefinite GROUP could have resulted in the parser accepting malformed ASN.1. This vulnerability affects Firefox < 102. | ||||
| CVE-2022-34475US | medium6.1 | — | ||
SVG <code><use></code> tags that referenced a same-origin document could have resulted in script execution if attacker input was sanitized via the HTML Sanitizer API. This wo… | ||||
| CVE-2022-34474US | medium6.1 | — | ||
Even when an iframe was sandboxed with <code>allow-top-navigation-by-user-activation</code>, if it received a redirect header to an external protocol the browser would process the… | ||||
| CVE-2022-34473US | medium6.1 | — | ||
The HTML Sanitizer should have sanitized the <code>href</code> attribute of SVG <code><use></code> tags; however it incorrectly did not sanitize <code>xlink:href</code> attri… | ||||
| CVE-2022-34472US | medium4.3 | — | ||
If there was a PAC URL set and the server that hosts the PAC was not reachable, OCSP requests would have been blocked, resulting in incorrect error pages being shown. This vulnerab… | ||||
| CVE-2022-34471US | medium6.5OT elevated | — | ||
When downloading an update for an addon, the downloaded addon update's version was not verified to match the version selected from the manifest. If the manifest had been tampered w… | ||||
| CVE-2022-34470US | critical9.8 | — | ||
Session history navigations may have led to a use-after-free and potentially exploitable crash. This vulnerability affects Firefox < 102, Firefox ESR < 91.11, Thunderbird < 102, an… | ||||
| CVE-2022-34469US | high8.1 | — | ||
When a TLS Certificate error occurs on a domain protected by the HSTS header, the browser should not allow the user to bypass the certificate error. On Firefox for Android, the use… | ||||
| CVE-2022-34468US | high8.8 | — | ||
An iframe that was not permitted to run scripts could do so if the user clicked on a <code>javascript:</code> link. This vulnerability affects Firefox < 102, Firefox ESR < 91.11, T… | ||||
| CVE-2022-2226US | medium6.5OT elevated | — | ||
An OpenPGP digital signature includes information about the date when the signature was created. When displaying an email that contains a digital signature, the email's date will b… | ||||
| CVE-2022-2200US | high8.8 | — | ||
If an object prototype was corrupted by an attacker, they would have been able to set undesired attributes on a JavaScript object, leading to privileged code execution. This vulner… | ||||
02
references
External citations — patches, advisories, analysis.
- Oracle Linux Security Advisory ELSA-2022-5469 vom 2022-07-01external
- Oracle Linux Security Advisory ELSA-2022-5470 vom 2022-07-01external
- Oracle Linux Security Advisory ELSA-2022-5479 vom 2022-07-01external
- Oracle Linux Security Advisory ELSA-2022-5480 vom 2022-07-01external
- Oracle Linux Security Advisory ELSA-2022-5481 vom 2022-07-04external
- Oracle Linux Security Advisory ELSA-2022-5482 vom 2022-07-04external
- Red Hat Security Advisory RHSA-2022:5469 vom 2022-07-01external
- Red Hat Security Advisory RHSA-2022:5470 vom 2022-07-01external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan