PT-2022-4949 · Mozilla+9 · Thunderbird+11

Jason Kratzer + 1 · Published 2022-01-14 · Updated 2024-06-15 · CVE-2022-22763

Positive Technologies (AI Summary)

CVSS v3.1

9.6

Critical

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 96 Thunderbird versions prior to 91.6 Firefox ESR versions prior to 91.6

Description The issue is related to a problem that occurs when a worker is shut down, allowing a script to run late in its lifecycle, at a point where it should not be possible. This could potentially lead to security restrictions being bypassed. The estimated number of potentially affected devices worldwide is not specified.

Recommendations For Firefox versions prior to 96, update to version 96 or later. For Thunderbird versions prior to 91.6, update to version 91.6 or later. For Firefox ESR versions prior to 91.6, update to version 91.6 or later.

Exploit

Fix

Race Condition

Weakness Enumeration

CWE-644

CWE-362

Related Identifiers

ALSA-2022:0510

ALSA-2022:0535

ALT-PU-2022-1053

ALT-PU-2022-1229

ALT-PU-2022-1268

ALT-PU-2022-1311

ALT-PU-2022-1312

ALT-PU-2022-1313

ALT-PU-2022-1316

ALT-PU-2022-1781

ALT-PU-2022-1783

ALT-PU-2022-2458

ALT-PU-2022-2929

ALT-PU-2022-2930

ALT-PU-2023-1138

ALT-PU-2023-1139

ALT-PU-2023-4336

ALT-PU-2023-4339

BDU:2022-06142

CESA-2022_0510

CESA-2022_0514

CESA-2022_0535

CESA-2022_0538

CVE-2022-22763

DLA-2916-1

DLA-2921-1

DSA-5069-1

DSA-5074-1

MGASA-2022-0057

MGASA-2022-0061

OESA-2023-1673

OESA-2023-1674

OPENSUSE-SU-2022:0559-1

OPENSUSE-SU-2022_0559-1

OPENSUSE-SU-2022_40696-1

OPENSUSE-SU-2024:11842-1

RHSA-2022:0510

RHSA-2022:0511

RHSA-2022:0512

RHSA-2022:0513

RHSA-2022:0514

RHSA-2022:0535

RHSA-2022:0536

RHSA-2022:0537

RHSA-2022:0538

RHSA-2022:0539

RHSA-2022_0510

RHSA-2022_0514

RHSA-2022_0535

RHSA-2022_0538

RLSA-2022:0510

RLSA-2022:0535

SUSE-SU-2022:0559-1

SUSE-SU-2022:0565-1

SUSE-SU-2022:0676-1

SUSE-SU-2022:0696-1

SUSE-SU-2022:14896-1

SUSE-SU-2022_14896-1

USN-5345-1

Affected Products

Alt Linux

Almalinux

Astra Linux

Centos

Firefox

Firefox Esr

Linuxmint

Red Hat

Rocky Linux

Suse

Thunderbird

Ubuntu

References · 397

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/firefox_jit_use_after_free.rb · Exploit
• 🔥 https://github.com/mistymntncop/CVE-2022-1802 · Exploit
• 🔥 https://github.com/0vercl0k/CVE-2022-28281 · Exploit
• 🔥 https://github.com/mistymntncop/CVE-2022-26485 · Exploit
• 🔥 https://github.com/aleksejspopovs/cve-2020-16012 · Exploit
• 🔥❌ https://github.com/MagicPwnrin/CVE-2022-28282 · Exploit, Deleted
• 🔥 https://bugzilla.mozilla.org/show_bug.cgi?id=1740534 · Exploit
• 🔥❌ https://github.com/Pwnrin/CVE-2022-28282 · Exploit, Deleted
• https://nvd.nist.gov/vuln/detail/CVE-2021-23983 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2021-38498 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2021-29953 · Security Note
• https://mozilla.org/en-US/security/advisories/mfsa2022-06/#CVE-2022-22763 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2022-0514.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-36318 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2021-29944 · Security Note