PT-2022-5651 · Mozilla+9 · Thunderbird+11

Ashley Hale · Published 2022-10-18 · Updated 2024-12-12 · CVE-2022-42932

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 106 Firefox ESR versions prior to 102.4 Thunderbird versions prior to 102.4

Description The issue is related to memory safety bugs, including evidence of memory corruption, which could potentially be exploited to run arbitrary code. This is due to a buffer overflow in memory, allowing a remote attacker to execute arbitrary code using a specially crafted website.

Recommendations For Firefox versions prior to 106, update to version 106 or later. For Firefox ESR versions prior to 102.4, update to version 102.4 or later. For Thunderbird versions prior to 102.4, update to version 102.4 or later.

Exploit

Fix

Memory Corruption

Buffer Overflow

Weakness Enumeration

CWE-787

CWE-119

CWE-120

Related Identifiers

ALSA-2022:7070

ALSA-2022:7071

ALSA-2022:7178

ALSA-2022:7190

ALT-PU-2022-2886

ALT-PU-2022-2909

ALT-PU-2022-2910

ALT-PU-2022-3045

ALT-PU-2022-3046

ALT-PU-2022-3047

ALT-PU-2023-1137

ALT-PU-2023-1138

ALT-PU-2023-4335

ALT-PU-2023-4336

ALT-PU-2023-5754

ALT-PU-2024-3614

BDU:2022-07019

CESA-2022_7070

CESA-2022_7190

CVE-2022-42932

DLA-3156-1

DLA-3170-1

DSA-5259-1

DSA-5262-1

MGASA-2022-0378

OPENSUSE-SU-2022_3726-1

OPENSUSE-SU-2022_4085-1

OPENSUSE-SU-2024:12425-1

OPENSUSE-SU-2024:12429-1

OPENSUSE-SU-2024:12439-1

OPENSUSE-SU-2024:14572-1

RHSA-2022:7066

RHSA-2022:7068

RHSA-2022:7069

RHSA-2022:7070

RHSA-2022:7071

RHSA-2022:7072

RHSA-2022:7178

RHSA-2022:7181

RHSA-2022:7182

RHSA-2022:7183

RHSA-2022:7184

RHSA-2022:7190

RHSA-2022_7069

RHSA-2022_7070

RHSA-2022_7071

RHSA-2022_7178

RHSA-2022_7184

RHSA-2022_7190

RLSA-2022:7070

RLSA-2022:7190

SUSE-SU-2022:3698-1

SUSE-SU-2022:3719-1

SUSE-SU-2022:3726-1

SUSE-SU-2022:4085-1

USN-5709-1

USN-5709-2

USN-5724-1

Affected Products

Alt Linux

Almalinux

Astra Linux

Centos

Firefox

Firefox Esr

Linuxmint

Red Hat

Rocky Linux

Suse

Thunderbird

Ubuntu

References · 1992

• 🔥 https://github.com/mistymntncop/CVE-2023-4863 · Exploit
• 🔥 https://github.com/mistymntncop/CVE-2022-1802 · Exploit
• 🔥 https://github.com/0vercl0k/CVE-2022-28281 · Exploit
• 🔥 https://github.com/LiveOverflow/webp-CVE-2023-4863 · Exploit
• 🔥 https://github.com/mistymntncop/CVE-2022-26485 · Exploit
• 🔥 https://github.com/wrv/cve-2023-5217-poc · Exploit
• 🔥 https://github.com/UT-Security/cve-2023-5217-poc · Exploit
• 🔥 https://github.com/bbaranoff/CVE-2023-4863 · Exploit
• 🔥❌ https://github.com/MagicPwnrin/CVE-2022-28282 · Exploit, Deleted
• 🔥❌ https://github.com/Pwnrin/CVE-2022-28282 · Exploit, Deleted
• https://osv.dev/vulnerability/openSUSE-SU-2024:12429-1 · Vendor Advisory
• https://errata.almalinux.org/8/ALSA-2022-7190.html · Vendor Advisory
• https://mozilla.org/security/advisories/mfsa2022-45 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42932 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2022-42932 · Vendor Advisory