PT-2022-3948

CVE-2022-36317

·

تاريخ النشر

2022-07-26

·

تاريخ التحديث

2024-12-12

الوصف من

CVSS 2.0
7.8
عالية
المقاييسAV:N/AC:L/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions Firefox versions prior to 103 Firefox for Android versions prior to 103
Description The issue exists due to insufficient input validation. Exploitation can allow a remote attacker to cause a denial of service by visiting a website with an overly long URL, potentially causing the user interface to hang. This could lead to a permanent denial of service due to session restore. The issue only affects Firefox for Android, with other operating systems being unaffected.
Recommendations For Firefox versions prior to 103, update to version 103 or later to resolve the issue. For Firefox for Android versions prior to 103, update to version 103 or later to resolve the issue. As a temporary workaround, consider avoiding websites with overly long URLs until a patch is available.
قابلية الاستغلال
إصلاح
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
تصنيف نقاط الضعف
المعرّفات ذات الصلة
ALT-PU-2022-2306
ALT-PU-2022-2930
ALT-PU-2023-1139
ALT-PU-2023-4339
ALT-PU-2023-5754
ALT-PU-2023-6436
OPENSUSE-SU-2024:12227-1
OPENSUSE-SU-2024:14572-1
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾