The vulnerability of Firefox browsers, Firefox ESR, and the Thunderbird email client relates to the execution of operations outside the buffer limits. This allows attackers to trigger service failures or execute arbitrary code.

🗓️ 21 Nov 2022 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 10 Views

Firefox, Firefox ESR, and Thunderbird flaw lets out-of-bounds code execution via crafted page.

Reporter	Title	Published	Views	Family All 227
IBM Security Bulletins	Security Bulletin: Due to use of Mozilla Firefox, IBM Cloud Pak for Multicloud Management Monitoring is vulnerable to multiple vulnerabilities.	31 Aug 202311:04	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities of Mozilla Firefox (less than Firefox 102.5ESR) have affected Synthetic Playback Agent 8.1.4.0-8.1.4 IF16	20 Dec 202206:00	–	ibm
ALT Linux	Security fix for the ALT Linux 10 package firefox-esr version 102.5.0-alt1	16 Nov 202200:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 10 package thunderbird version 102.5.0-alt1	24 Nov 202200:00	–	altlinux
Tenable Nessus	Amazon Linux 2 : firefox (ALASFIREFOX-2023-009)	27 Sep 202300:00	–	nessus
Tenable Nessus	AlmaLinux 8 : thunderbird (ALSA-2022:8547)	21 Nov 202200:00	–	nessus
Tenable Nessus	AlmaLinux 8 : firefox (ALSA-2022:8554)	21 Nov 202200:00	–	nessus
Tenable Nessus	AlmaLinux 9 : thunderbird (ALSA-2022:8561)	21 Nov 202200:00	–	nessus
Tenable Nessus	AlmaLinux 9 : firefox (ALSA-2022:8580)	23 Nov 202200:00	–	nessus
Tenable Nessus	CentOS 7 : firefox (RHSA-2022:8552)	1 Dec 202200:00	–	nessus

Vulners

Node

OR

mozilla thunderbirdRange<102.5

mozilla firefox_esrRange<102.5

mozilla firefoxRange<107

slackware_linux slackwareMatch15.0

Source	Link
mozilla	www.mozilla.org/en-US/security/advisories/mfsa2022-47/
mozilla	www.mozilla.org/en-US/security/advisories/mfsa2022-48/
mozilla	www.mozilla.org/en-US/security/advisories/mfsa2022-49/
ubuntu	www.ubuntu.com/security/notices/USN-5726-1
cybersecurity-help	www.cybersecurity-help.cz/vdb/SB2022111713
slackware	www.slackware.com/security/viewer.php
security-tracker	www.security-tracker.debian.org/tracker/CVE-2022-45421
wiki	www.wiki.astralinux.ru/astra-linux-se16-bulletin-20221220SE16
wiki	www.wiki.astralinux.ru/astra-linux-se17-bulletin-2022-1221SE17MD
xn--80ahaefyxhn	www.xn--80ahaefyxhn.xn--j1afgaq.xn--p1ai/bin/view/%D0%9E%D0%A1%D0%BD%D0%BE%D0%B2%D0%B0/%D0%9E%D0%B1%D0%BD%D0%BE%D0%B2%D0%BB%D0%B5%D0%BD%D0%B8%D1%8F/2.7/

26 Dec 2023 00:00Current

8.3High risk

Vulners AI Score8.3

CVSS 38.8

CVSS 210

EPSS0.00702

Firefox extended support release Thunderbird out of bounds code execution