PT-2022-7571 · Mozilla+9 · Thunderbird+11

Irvan Kurniawan · Published 2022-09-06 · Updated 2024-06-15 · CVE-2022-46882

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 107 Firefox ESR versions prior to 102.6 Thunderbird versions prior to 102.6

Description A use-after-free issue in WebGL extensions could lead to a potentially exploitable crash, allowing a remote attacker to access confidential data, compromise data integrity, and cause a denial of service.

Recommendations For Firefox versions prior to 107, update to version 107 or later. For Firefox ESR versions prior to 102.6, update to version 102.6 or later. For Thunderbird versions prior to 102.6, update to version 102.6 or later.

Exploit

Fix

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

ALSA-2022:9065

ALSA-2022:9067

ALSA-2022:9074

ALSA-2022:9080

ALT-PU-2022-3090

ALT-PU-2022-3270

ALT-PU-2022-3341

ALT-PU-2022-3354

ALT-PU-2022-3401

ALT-PU-2022-3407

ALT-PU-2023-1137

ALT-PU-2023-1138

ALT-PU-2023-4335

ALT-PU-2023-4336

ALT-PU-2023-5754

ALT-PU-2024-3614

BDU:2024-07328

CESA-2022_9067

CESA-2022_9074

CVE-2022-46882

DLA-3241-1

DLA-3242-1

DSA-5301-1

DSA-5303-1

MGASA-2022-0475

MGASA-2022-0476

OESA-2023-1673

OESA-2023-1674

OPENSUSE-SU-2022_4462-1

OPENSUSE-SU-2022_4579-1

OPENSUSE-SU-2024:12568-1

OPENSUSE-SU-2024:12571-1

RHSA-2022:9065

RHSA-2022:9066

RHSA-2022:9067

RHSA-2022:9068

RHSA-2022:9069

RHSA-2022:9070

RHSA-2022:9071

RHSA-2022:9072

RHSA-2022:9074

RHSA-2022:9075

RHSA-2022:9076

RHSA-2022:9077

RHSA-2022:9078

RHSA-2022:9079

RHSA-2022:9080

RHSA-2022:9081

RHSA-2022_9065

RHSA-2022_9067

RHSA-2022_9072

RHSA-2022_9074

RHSA-2022_9079

RHSA-2022_9080

RLSA-2022:9067

SUSE-SU-2022:4460-1

SUSE-SU-2022:4461-1

SUSE-SU-2022:4462-1

SUSE-SU-2022:4579-1

USN-5824-1

Affected Products

Alt Linux

Almalinux

Astra Linux

Centos

Firefox

Firefox Esr

Linuxmint

Red Hat

Rocky Linux

Suse

Thunderbird

Ubuntu

References · 427

• 🔥 https://github.com/mistymntncop/CVE-2023-4863 · Exploit
• 🔥 https://github.com/mistymntncop/CVE-2022-1802 · Exploit
• 🔥 https://github.com/0vercl0k/CVE-2022-28281 · Exploit
• 🔥 https://github.com/LiveOverflow/webp-CVE-2023-4863 · Exploit
• 🔥 https://github.com/mistymntncop/CVE-2022-26485 · Exploit
• 🔥 https://github.com/UT-Security/cve-2023-5217-poc · Exploit
• 🔥 https://github.com/wrv/cve-2023-5217-poc · Exploit
• 🔥 https://github.com/bbaranoff/CVE-2023-4863 · Exploit
• 🔥❌ https://github.com/MagicPwnrin/CVE-2022-28282 · Exploit, Deleted
• 🔥❌ https://github.com/Pwnrin/CVE-2022-28282 · Exploit, Deleted
• https://nvd.nist.gov/vuln/detail/CVE-2021-23983 · Security Note
• https://ubuntu.com/security/CVE-2022-46874 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-38498 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2021-29953 · Security Note
• https://mozilla.org/security/advisories/mfsa2022-52 · Vendor Advisory