PT-2022-27998

CVE-2022-46875

·

Published

2022-12-13

·

Updated

2024-12-12

Description by

CVSS 3.1
10
Critical
MetricsAV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Firefox versions prior to 108 Firefox ESR versions prior to 102.6 Thunderbird versions prior to 102.6
Description The issue allows executable files, such as .atloc and .ftploc, to be downloaded without presenting a warning, potentially enabling them to run commands on a user's computer. This problem is specific to Mac OS operating systems, with other operating systems being unaffected.
Recommendations For Firefox versions prior to 108, update to version 108 or later. For Firefox ESR versions prior to 102.6, update to version 102.6 or later. For Thunderbird versions prior to 102.6, update to version 102.6 or later.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Related identifiers
ALT-PU-2022-3341
ALT-PU-2022-3354
ALT-PU-2022-3356
ALT-PU-2022-3401
ALT-PU-2022-3407
ALT-PU-2023-1043
ALT-PU-2023-1137
ALT-PU-2023-1138
ALT-PU-2023-4335
ALT-PU-2023-4336
ALT-PU-2023-5754
OESA-2023-1673
OESA-2023-1674
OPENSUSE-SU-2022_4462-1
OPENSUSE-SU-2022_4579-1
OPENSUSE-SU-2024:12568-1
OPENSUSE-SU-2024:12571-1
OPENSUSE-SU-2024:12577-1
OPENSUSE-SU-2024:14572-1
SUSE-SU-2022:4460-1
SUSE-SU-2022:4461-1
SUSE-SU-2022:4462-1
SUSE-SU-2022:4579-1
Found an issue in the description? Have something to add? Feel free to write us 👾