PT-2022-4927 · Mozilla+1 · Firefox+1

James Lee · Published 2022-02-08 · Updated 2024-12-12 · CVE-2022-22762

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Firefox for Android versions prior to 97

Description The issue is related to incorrect limitation of visualized user interface layers in Mozilla Firefox, which could allow a remote attacker to conduct spoofing attacks. Under certain circumstances, a JavaScript alert could have been shown while another website was displayed underneath it, potentially tricking the user.

Recommendations For Firefox for Android versions prior to 97, update to version 97 or later to resolve the issue.

Exploit

Fix

Clickjacking

UI Misrepresentation of Critical Information

Weakness Enumeration

CWE-1021

CWE-451

Related Identifiers

ALT-PU-2022-1230

ALT-PU-2022-2930

ALT-PU-2023-1139

ALT-PU-2023-4336

ALT-PU-2023-4339

BDU:2022-06108

CVE-2022-22762

OPENSUSE-SU-2024:11837-1

OPENSUSE-SU-2024:14572-1

Affected Products

Alt Linux

Firefox

References · 1872

• 🔥 https://bugzilla.mozilla.org/show_bug.cgi?id=1743931 · Exploit
• https://osv.dev/vulnerability/CVE-2022-22762 · Vendor Advisory
• https://mozilla.org/en-US/security/advisories/mfsa2022-04 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-22762 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2024:11837-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-22762 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:14572-1 · Vendor Advisory
• https://mozilla.org/security/advisories/mfsa2022-04 · Vendor Advisory
• https://bdu.fstec.ru/vul/2022-06108 · Security Note
• https://suse.com/security/cve/CVE-2023-25744 · Note
• https://suse.com/security/cve/CVE-2021-29962 · Note
• https://suse.com/security/cve/CVE-2023-29545 · Note
• https://suse.com/security/cve/CVE-2020-26955 · Note
• https://suse.com/security/cve/CVE-2015-2731 · Note
• https://suse.com/security/cve/CVE-2024-2612 · Note