CVE-2022-36314

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 103 Firefox ESR versions prior to 102.1 Thunderbird versions prior to 102.1

Description The issue is related to the disclosure of information in an erroneous data area, potentially allowing a remote attacker to initiate network requests from the operating system. This can occur when opening a Windows shortcut from the local filesystem, where an attacker could supply a remote path, leading to unexpected network requests. The issue specifically affects Firefox for Windows, with other operating systems being unaffected.

Recommendations For Firefox versions prior to 103, update to version 103 or later to resolve the issue. For Firefox ESR versions prior to 102.1, update to version 102.1 or later to resolve the issue. For Thunderbird versions prior to 102.1, update to version 102.1 or later to resolve the issue.