Lucene search

Kaspersky LabKLA12415

HistoryJan 11, 2022 - 12:00 a.m.

KLA12415 Multiple vulnerabilities in Mozilla Firefox

2022-01-1100:00:00

Kaspersky Lab

threats.kaspersky.com

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

9.2 High

AI Score

Confidence

Low

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

0.002 Low

EPSS

Percentile

50.8%

JSON

Detect date:

01/11/2022

Severity:

High

Description:

Multiple vulnerabilities were found in Mozilla Firefox. Malicious users can exploit these vulnerabilities to bypass security restrictions, execute arbitrary code, spoof user interface, gain privileges, cause denial of service, obtain sensitive information.

Affected products:

Mozilla Firefox earlier than 96

Solution:

Update to the latest version
Download Firefox

Original advisories:

MFSA2022-01

Impacts:

ACE

Related products:

Mozilla Firefox

CVE-IDS:

CVE-2022-22750

References

cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22736

cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22737

cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22738

cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22739

cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22740

cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22741

cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22742

cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22743

cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22744

cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22745

cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22746

cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22747

cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22748

cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22749

cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22750

cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22751

cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22752

cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22763

statistics.securelist.com/vulnerability-scan/month

threats.kaspersky.com/en/product/Mozilla-Firefox/

www.mozilla.org/en-US/firefox/new/

www.mozilla.org/en-US/security/advisories/mfsa2022-01/

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

9.2 High

AI Score

Confidence

Low

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

0.002 Low

EPSS

Percentile

50.8%

JSON

Related for KLA12415