PT-2022-4793 · Mozilla+4 · Firefox+4

Christian Holler + 1 · Published 2022-01-11 · Updated 2024-12-12 · CVE-2022-22752

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 96

Description The issue is related to memory safety bugs, including evidence of memory corruption, which could potentially be exploited to run arbitrary code. It is associated with a buffer overflow in memory, allowing a remote attacker to execute arbitrary code using a specially crafted website.

Recommendations For versions prior to 96, update to version 96 or later to resolve the issue. As a temporary workaround, consider restricting access to untrusted websites to minimize the risk of exploitation. Avoid using Firefox for sensitive operations until the issue is resolved.

Exploit

Fix

Memory Corruption

Buffer Overflow

Weakness Enumeration

CWE-787

CWE-119

Related Identifiers

ALT-PU-2022-1053

ALT-PU-2022-2458

ALT-PU-2022-2929

ALT-PU-2022-2930

ALT-PU-2023-1138

ALT-PU-2023-1139

ALT-PU-2023-4336

ALT-PU-2023-4339

BDU:2022-05748

CVE-2022-22752

OPENSUSE-SU-2024:11732-1

OPENSUSE-SU-2024:14572-1

USN-5229-1

Affected Products

Alt Linux

Astra Linux

Firefox

Linuxmint

Ubuntu

References · 1896

• 🔥 https://github.com/mistymntncop/CVE-2022-1802 · Exploit
• 🔥 https://github.com/0vercl0k/CVE-2022-28281 · Exploit
• 🔥 https://github.com/mistymntncop/CVE-2022-26485 · Exploit
• 🔥❌ https://github.com/MagicPwnrin/CVE-2022-28282 · Exploit, Deleted
• 🔥❌ https://github.com/Pwnrin/CVE-2022-28282 · Exploit, Deleted
• https://osv.dev/vulnerability/CVE-2022-22752 · Vendor Advisory
• https://safe-surf.ru/specialists/bulletins-nkcki/674019 · Security Note
• https://ubuntu.com/security/notices/USN-5229-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-22751 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-22752 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-22743 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-22740 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22752 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-22752 · Security Note
• https://mozilla.org/security/advisories/mfsa2022-01 · Vendor Advisory