PT-2022-1629 · Mozilla+4 · Firefox+4

Gabriele Svelto + 4 · Published 2022-02-08 · Updated 2024-12-12 · CVE-2022-0511

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 97

Description The issue is related to errors in processing HTML content. It may allow a remote attacker to execute arbitrary code using a specially crafted web page. Memory safety bugs have been reported, showing evidence of memory corruption, which could potentially be exploited to run arbitrary code.

Recommendations For versions prior to 97, update to version 97 or later to resolve the issue. As a temporary workaround, consider restricting access to potentially vulnerable HTML content until the update is applied.

Exploit

Fix

Memory Corruption

Buffer Overflow

Weakness Enumeration

CWE-787

CWE-119

Related Identifiers

ALT-PU-2022-1230

ALT-PU-2022-2458

ALT-PU-2022-2929

ALT-PU-2022-2930

ALT-PU-2023-1138

ALT-PU-2023-1139

ALT-PU-2023-4336

ALT-PU-2023-4339

BDU:2022-00870

CVE-2022-0511

OESA-2023-1673

OESA-2023-1674

OPENSUSE-SU-2024:11837-1

OPENSUSE-SU-2024:14572-1

USN-5284-1

Affected Products

Alt Linux

Astra Linux

Firefox

Linuxmint

Ubuntu

References · 2185

• 🔥 https://github.com/mistymntncop/CVE-2022-1802 · Exploit
• 🔥 https://github.com/0vercl0k/CVE-2022-28281 · Exploit
• 🔥 https://github.com/mistymntncop/CVE-2022-26485 · Exploit
• 🔥❌ https://github.com/MagicPwnrin/CVE-2022-28282 · Exploit, Deleted
• 🔥❌ https://github.com/Pwnrin/CVE-2022-28282 · Exploit, Deleted
• https://nvd.nist.gov/vuln/detail/CVE-2021-23968 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-45408 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-4046 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-22748 · Security Note
• https://cve.org/CVERecord?id=CVE-2022-0511 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-34471 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-22757 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-29539 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-32205 · Security Note
• https://mozilla.org/en-US/security/advisories/mfsa2022-04 · Vendor Advisory