PT-2022-2558 · Mozilla+10 · Thunderbird+12

Gabriele Svelto + 1 · Published 2022-05-03 · Updated 2024-12-12 · CVE-2022-29917

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 100 Firefox ESR versions prior to 91.9 Thunderbird versions prior to 91.9

Description The issue is related to memory safety bugs and buffer overflow when processing HTML content, which could allow a remote attacker to execute arbitrary code or cause a denial of service with a specially crafted web page. Some of these bugs showed evidence of memory corruption.

Recommendations For Firefox versions prior to 100, update to version 100 or later. For Firefox ESR versions prior to 91.9, update to version 91.9 or later. For Thunderbird versions prior to 91.9, update to version 91.9 or later.

Exploit

Fix

Memory Corruption

Buffer Overflow

Weakness Enumeration

CWE-787

CWE-119

CWE-120

Related Identifiers

ALSA-2022:1705

ALSA-2022:1730

ALT-PU-2022-1812

ALT-PU-2022-1819

ALT-PU-2022-1847

ALT-PU-2022-1855

ALT-PU-2022-1941

ALT-PU-2022-1951

ALT-PU-2022-1983

ALT-PU-2022-2044

ALT-PU-2022-2053

ALT-PU-2022-2458

ALT-PU-2022-2929

ALT-PU-2022-2930

ALT-PU-2023-1138

ALT-PU-2023-1139

ALT-PU-2023-4336

ALT-PU-2023-4339

BDU:2022-02988

CESA-2022_1703

CESA-2022_1705

CESA-2022_1725

CESA-2022_1730

CVE-2022-29917

DLA-2994-1

DLA-3020-1

DSA-5129-1

DSA-5141-1

MGASA-2022-0162

MGASA-2022-0163

OPENSUSE-SU-2022_1719-1

OPENSUSE-SU-2022_1748-1

OPENSUSE-SU-2024:12044-1

OPENSUSE-SU-2024:12045-1

OPENSUSE-SU-2024:14572-1

RHSA-2022:1701

RHSA-2022:1702

RHSA-2022:1703

RHSA-2022:1704

RHSA-2022:1705

RHSA-2022:1724

RHSA-2022:1725

RHSA-2022:1726

RHSA-2022:1727

RHSA-2022:1730

RHSA-2022:4589

RHSA-2022:4590

RHSA-2022_1703

RHSA-2022_1705

RHSA-2022_1725

RHSA-2022_1730

RHSA-2022_4589

RHSA-2022_4590

RLSA-2022:1705

RLSA-2022:1730

SUSE-RU-2022:1579-1

SUSE-SU-2022:1719-1

SUSE-SU-2022:1731-1

SUSE-SU-2022:1748-1

SUSE-SU-2022:1757-1

SUSE-SU-2022_1719-1

USN-5411-1

USN-5435-1

Affected Products

Alt Linux

Almalinux

Astra Linux

Centos

Firefox

Firefox Esr

Linuxmint

Red Hat

Red Os

Rocky Linux

Suse

Thunderbird

Ubuntu

References · 1971

• 🔥 https://github.com/mistymntncop/CVE-2022-1802 · Exploit
• 🔥 https://github.com/0vercl0k/CVE-2022-28281 · Exploit
• 🔥 https://github.com/mistymntncop/CVE-2022-26485 · Exploit
• 🔥 https://bugzilla.mozilla.org/buglist.cgi?bug_id=1684739%2C1706441%2C1753298%2C1762614%2C1762620%2C1764778 · Exploit
• 🔥❌ https://github.com/MagicPwnrin/CVE-2022-28282 · Exploit, Deleted
• 🔥❌ https://github.com/Pwnrin/CVE-2022-28282 · Exploit, Deleted
• https://osv.dev/vulnerability/DLA-2994-1 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-29917 · Security Note
• https://ubuntu.com/security/CVE-2022-1520 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-29913 · Vendor Advisory
• https://osv.dev/vulnerability/USN-5411-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:12045-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-29918 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:12044-1 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2022-1705.html · Vendor Advisory