PT-2022-1405
CVE-2022-22751
·
تاريخ النشر
2022-01-11
·
تاريخ التحديث
2026-10-31
الوصف من
CVSS 2.0
10
حرجةالمقاييسAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
Firefox versions prior to 96
Firefox ESR versions prior to 91.5
Thunderbird versions prior to 91.5
Description
The issue is related to memory safety bugs present in the software, which can lead to memory corruption. With sufficient effort, these bugs could be exploited to run arbitrary code. The vulnerability is associated with incorrect limitation of operations within the bounds of a memory buffer when processing HTML content. This could allow a remote attacker to cause memory damage and execute arbitrary code on the target system.
Recommendations
For Firefox versions prior to 96, update to version 96 or later.
For Firefox ESR versions prior to 91.5, update to version 91.5 or later.
For Thunderbird versions prior to 91.5, update to version 91.5 or later.
قابلية الاستغلال
استغلال
إصلاح
التأثيرات
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾