CVE-2022-38477

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 104 Firefox ESR versions prior to 102.2 Thunderbird versions prior to 102.2

Description The issue is related to memory safety bugs, including evidence of memory corruption, which could potentially be exploited to run arbitrary code. It is also associated with a JavaScript scripting engine handler vulnerability that involves buffer copying without checking the size of input data. This could allow a remote attacker to execute arbitrary code by opening a specially crafted malicious web page.

Recommendations For Firefox versions prior to 104, update to version 104 or later. For Firefox ESR versions prior to 102.2, update to version 102.2 or later. For Thunderbird versions prior to 102.2, update to version 102.2 or later.