PT-2022-6190 · Mozilla+10 · Firefox+10

Hafiizh · Published 2022-12-13 · Updated 2024-12-12 · CVE-2022-46877

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 108

Description The issue is related to the implementation of fullscreen notification in the browser, which could be delayed or suppressed, potentially leading to user confusion or spoofing attacks. This could allow a remote attacker to redirect the user to a vulnerable page and perform a spoofing attack.

Recommendations For versions prior to 108, update to version 108 or later to resolve the issue.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

CWE-357

Related Identifiers

ALSA-2023:0285

ALSA-2023:0288

ALSA-2023:0463

ALSA-2023:0476

ALT-PU-2022-3356

ALT-PU-2023-1043

ALT-PU-2023-1119

ALT-PU-2023-1140

ALT-PU-2023-1193

ALT-PU-2023-1243

ALT-PU-2023-1315

ALT-PU-2023-1758

ALT-PU-2023-4335

ALT-PU-2023-4365

ALT-PU-2023-5754

ALT-PU-2024-3614

BDU:2023-00384

CESA-2023_0288

CESA-2023_0296

CESA-2023_0456

CESA-2023_0463

CVE-2022-46877

DLA-3275-1

DLA-3324-1

DSA-5322-1

DSA-5355-1

MGASA-2023-0018

MGASA-2023-0034

OPENSUSE-SU-2023_0113-1

OPENSUSE-SU-2023_0329-1

OPENSUSE-SU-2024:12577-1

OPENSUSE-SU-2024:12627-1

OPENSUSE-SU-2024:12652-1

OPENSUSE-SU-2024:14572-1

RHSA-2023:0285

RHSA-2023:0286

RHSA-2023:0288

RHSA-2023:0289

RHSA-2023:0290

RHSA-2023:0294

RHSA-2023:0295

RHSA-2023:0296

RHSA-2023:0456

RHSA-2023:0457

RHSA-2023:0459

RHSA-2023:0460

RHSA-2023:0461

RHSA-2023:0462

RHSA-2023:0463

RHSA-2023:0476

RHSA-2023_0285

RHSA-2023_0288

RHSA-2023_0296

RHSA-2023_0456

RHSA-2023_0463

RHSA-2023_0476

RLSA-2023:0285

RLSA-2023:0288

RLSA-2023:0463

RLSA-2023:0476

SUSE-SU-2023:0111-1

SUSE-SU-2023:0112-1

SUSE-SU-2023:0113-1

SUSE-SU-2023:0329-1

USN-5782-1

USN-5782-2

USN-5782-3

USN-5824-1

Affected Products

Alt Linux

Almalinux

Astra Linux

Centos

Linuxmint

Firefox

Red Hat

Red Os

Rocky Linux

Suse

Ubuntu

References · 2023

• 🔥 https://github.com/mistymntncop/CVE-2023-4863 · Exploit
• 🔥 https://github.com/LiveOverflow/webp-CVE-2023-4863 · Exploit
• 🔥 https://github.com/wrv/cve-2023-5217-poc · Exploit
• 🔥 https://github.com/UT-Security/cve-2023-5217-poc · Exploit
• 🔥 https://github.com/bbaranoff/CVE-2023-4863 · Exploit
• https://ubuntu.com/security/CVE-2022-46873 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2023:0329-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-00384 · Security Note
• https://ubuntu.com/security/CVE-2022-46880 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-45406 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2023-0456.html · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-45409 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se47-bulletin-2023-0727SE47 · Vendor Advisory
• https://errata.almalinux.org/8/ALSA-2023-0288.html · Vendor Advisory
• https://osv.dev/vulnerability/ALSA-2023:0285 · Vendor Advisory