PT-2022-6964
CVE-2022-46884
·
تاريخ النشر
2022-10-18
·
تاريخ التحديث
2024-03-13
الوصف من
CVSS 2.0
10
عاليةالمقاييسAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
Firefox versions prior to 106
Description
A potential use-after-free vulnerability existed in SVG Images if the Refresh Driver was destroyed at an inopportune time. This could have led to memory corruption or a potentially exploitable crash.
Recommendations
For Firefox versions prior to 106, update to Firefox 106 or later to resolve the issue. As a temporary workaround, consider avoiding the use of SVG images in Firefox until the update is applied.
قابلية الاستغلال
استغلال
إصلاح
التأثيرات
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾