DeutschIn der Originalsprache angezeigt — eine vollständige Übersetzung ist für eine zukünftige Version geplant.
Mozilla Firefox und Thunderbird: Mehrere Schwachstellen
Advisory ansehen veröffentlicht 2022-11-15
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Mozilla Firefox, Mozilla Firefox ESR und Mozilla Thunderbird ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Cross-Site-Scripting-Angriff durchzuführen und Informationen falsch darzustellen.
01
beschreibt (19)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2022-45421US | high8.8 | — | ||
Mozilla developers Andrew McCreight and Gabriele Svelto reported memory safety bugs present in Thunderbird 102.4. Some of these bugs showed evidence of memory corruption and we pre… | ||||
| CVE-2022-45420US | medium6.5 | — | ||
Use tables inside of an iframe, an attacker could have caused iframe contents to be rendered outside the boundaries of the iframe, resulting in potential user confusion or spoofing… | ||||
| CVE-2022-45419US | medium6.5 | — | ||
If the user added a security exception for an invalid TLS certificate, opened an ongoing TLS connection with a server that used that certificate, and then deleted the exception, Fi… | ||||
| CVE-2022-45418US | medium6.1 | — | ||
If a custom mouse cursor is specified in CSS, under certain circumstances the cursor could have been drawn over the browser UI, resulting in potential user confusion or spoofing at… | ||||
| CVE-2022-45417US | medium4.3 | — | ||
Service Workers did not detect Private Browsing Mode correctly in all cases, which could have led to Service Workers being written to disk for websites visited in Private Browsing… | ||||
| CVE-2022-45416US | medium6.5 | — | ||
Keyboard events reference strings like "KeyA" that were at fixed, known, and widely-spread addresses. Cache-based timing attacks such as Prime+Probe could have possibly figured out… | ||||
| CVE-2022-45415US | high7.8 | — | ||
When downloading an HTML file, if the title of the page was formatted as a filename with a malicious extension, Firefox may have saved the file with that extension, leading to poss… | ||||
| CVE-2022-45413US | medium6.1 | — | ||
Using the <code>S.browser_fallback_url parameter</code> parameter, an attacker could redirect a user to a URL and cause SameSite=Strict cookies to be sent.<br>*This issue only affe… | ||||
| CVE-2022-45412US | high8.8 | — | ||
When resolving a symlink such as <code>file:///proc/self/fd/1</code>, an error message may be produced where the symlink was resolved to a string containing unitialized memory in t… | ||||
| CVE-2022-45411US | medium6.1 | — | ||
Cross-Site Tracing occurs when a server will echo a request back via the Trace method, allowing an XSS attack to access to authorization headers and cookies inaccessible to JavaScr… | ||||
| CVE-2022-45410US | medium6.5OT erhöht | — | ||
When a ServiceWorker intercepted a request with <code>FetchEvent</code>, the origin of the request was lost after the ServiceWorker took ownership of it. This had the effect of neg… | ||||
| CVE-2022-45409US | high8.8 | — | ||
The garbage collector could have been aborted in several states and zones and <code>GCRuntime::finishCollection</code> may not have been called, leading to a use-after-free and pot… | ||||
| CVE-2022-45408US | medium6.5 | — | ||
Through a series of popups that reuse windowName, an attacker can cause a window to go fullscreen without the user seeing the notification prompt, resulting in potential user confu… | ||||
| CVE-2022-45407US | high7.5 | — | ||
If an attacker loaded a font using <code>FontFace()</code> on a background worker, a use-after-free could have occurred, leading to a potentially exploitable crash. This vulnerabil… | ||||
| CVE-2022-45406US | critical9.8 | — | ||
If an out-of-memory condition occurred when creating a JavaScript global, a JavaScript realm may be deleted while references to it lived on in a BaseShape. This could lead to a use… | ||||
| CVE-2022-45405US | medium6.5 | — | ||
Freeing arbitrary <code>nsIInputStream</code>'s on a different thread than creation could have led to a use-after-free and potentially exploitable crash. This vulnerability affects… | ||||
| CVE-2022-45404US | medium6.5 | — | ||
Through a series of popup and <code>window.print()</code> calls, an attacker can cause a window to go fullscreen without the user seeing the notification prompt, resulting in poten… | ||||
| CVE-2022-45403US | medium6.5 | — | ||
Service Workers should not be able to infer information about opaque cross-origin responses; but timing information for cross-origin media combined with Range requests might have a… | ||||
| CVE-2022-40674US | high8.1 | — | ||
libexpat before 2.4.9 has a use-after-free in the doContent function in xmlparse.c. | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- Oracle Linux Security Advisory ELSA-2022-8561 vom 2022-11-24external
- Oracle Linux Security Advisory ELSA-2022-8580 vom 2022-11-24external
- Red Hat Security Advisory RHSA-2022:8543 vom 2022-11-21external
- Red Hat Security Advisory RHSA-2022:8544 vom 2022-11-21external
- Red Hat Security Advisory RHSA-2022:8545 vom 2022-11-21external
- Red Hat Security Advisory RHSA-2022:8547 vom 2022-11-21external
- Red Hat Security Advisory RHSA-2022:8548 vom 2022-11-21external
- Red Hat Security Advisory RHSA-2022:8549 vom 2022-11-21external
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan