PT-2022-1405 · Mozilla+9 · Thunderbird+11

Calixte Denizet + 7 · Published 2022-01-11 · Updated 2024-12-12 · CVE-2022-22751

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 96 Firefox ESR versions prior to 91.5 Thunderbird versions prior to 91.5

Description The issue is related to memory safety bugs present in the software, which can lead to memory corruption. With sufficient effort, these bugs could be exploited to run arbitrary code. The vulnerability is associated with incorrect limitation of operations within the bounds of a memory buffer when processing HTML content. This could allow a remote attacker to cause memory damage and execute arbitrary code on the target system.

Recommendations For Firefox versions prior to 96, update to version 96 or later. For Firefox ESR versions prior to 91.5, update to version 91.5 or later. For Thunderbird versions prior to 91.5, update to version 91.5 or later.

Exploit

Fix

Memory Corruption

Buffer Overflow

Weakness Enumeration

CWE-787

CWE-119

Related Identifiers

ALSA-2022:0129

ALSA-2022:0130

ALT-PU-2022-1022

ALT-PU-2022-1023

ALT-PU-2022-1053

ALT-PU-2022-1078

ALT-PU-2022-1090

ALT-PU-2022-1091

ALT-PU-2022-1097

ALT-PU-2022-1781

ALT-PU-2022-1783

ALT-PU-2022-2458

ALT-PU-2022-2929

ALT-PU-2022-2930

ALT-PU-2023-1138

ALT-PU-2023-1139

ALT-PU-2023-4336

ALT-PU-2023-4339

BDU:2022-00300

CESA-2022_0124

CESA-2022_0127

CESA-2022_0129

CESA-2022_0130

CVE-2022-22751

DLA-2880-1

DLA-2881-1

DSA-5044-1

DSA-5045-1

MGASA-2022-0013

MGASA-2022-0019

OPENSUSE-SU-2022:0136-1

OPENSUSE-SU-2022:0199-1

OPENSUSE-SU-2022_0136-1

OPENSUSE-SU-2022_0199-1

OPENSUSE-SU-2024:11732-1

OPENSUSE-SU-2024:11733-1

OPENSUSE-SU-2024:14572-1

RHSA-2022:0123

RHSA-2022:0124

RHSA-2022:0125

RHSA-2022:0126

RHSA-2022:0127

RHSA-2022:0128

RHSA-2022:0129

RHSA-2022:0130

RHSA-2022:0131

RHSA-2022:0132

RHSA-2022_0124

RHSA-2022_0127

RHSA-2022_0129

RHSA-2022_0130

RLSA-2022:0129

RLSA-2022:0130

SUSE-SU-2022:0115-1

SUSE-SU-2022:0136-1

SUSE-SU-2022:0137-1

SUSE-SU-2022:0199-1

SUSE-SU-2022:14880-1

USN-5229-1

USN-5246-1

USN-5248-1

Affected Products

Alt Linux

Almalinux

Astra Linux

Centos

Firefox

Firefox Esr

Linuxmint

Red Hat

Rocky Linux

Suse

Thunderbird

Ubuntu

References · 2011

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/firefox_jit_use_after_free.rb · Exploit
• 🔥 https://github.com/mistymntncop/CVE-2022-1802 · Exploit
• 🔥 https://github.com/0vercl0k/CVE-2022-28281 · Exploit
• 🔥 https://github.com/mistymntncop/CVE-2022-26485 · Exploit
• 🔥 https://github.com/aleksejspopovs/cve-2020-16012 · Exploit
• 🔥❌ https://github.com/MagicPwnrin/CVE-2022-28282 · Exploit, Deleted
• 🔥❌ https://github.com/Pwnrin/CVE-2022-28282 · Exploit, Deleted
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-22751 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-43541 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-38508 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-43546 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-5229-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-43537 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-43538 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-22751 · Vendor Advisory