Lucene search
HistoryDec 22, 2022 - 8:15 p.m.
CVE-2022-45405
vulnerability
firefox
thunderbird
use-after-free
exploit
crash
CVSS3
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
EPSS
0.001
Percentile
50.6%
Freeing arbitrary <code>nsIInputStream</code>'s on a different thread than creation could have led to a use-after-free and potentially exploitable crash. This vulnerability affects Firefox ESR < 102.5, Thunderbird < 102.5, and Firefox < 107.
Affected configurations
Node
mozillafirefoxRange<107.0
ORmozillafirefox_esrRange<102.5
ORmozillathunderbirdRange<102.5
Related
cve
cve
CVE-2022-45405
2022-12-22 20:15:41
cvelist
cvelist
CVE-2022-45405
2022-12-22 00:00:00
veracode
veracode
Denial Of Service (DoS)
2022-11-19 18:48:21
debiancve
debiancve
CVE-2022-45405
2022-12-22 20:15:41
ubuntucve
ubuntucve
CVE-2022-45405
2022-11-16 00:00:00
alpinelinux
alpinelinux
CVE-2022-45405
2022-12-22 20:15:41
prion
prion
Code injection
2022-12-22 20:15:00
redhatcve
redhatcve
CVE-2022-45405
2022-11-16 11:26:09
redos
redos
ROS-20221118-05
2022-11-18 00:00:00
ROS-20221118-04
2022-11-18 00:00:00
ibm
ibm
openvas
openvas
Mozilla Thunderbird Security Advisories (MFSA2022-47, MFSA2022-49) - Windows
2022-11-16 00:00:00
Mozilla Firefox ESR Security Advisories (MFSA2022-47, MFSA2022-49) - Windows
2022-11-16 00:00:00
Slackware: Security Advisory (SSA:2022-320-03)
2022-11-17 00:00:00
nessus
nessus
Debian DSA-5284-1 : thunderbird - security update
2022-11-18 00:00:00
CentOS 7 : thunderbird (CESA-2022:8555)
2022-12-01 00:00:00
RHEL 8 : thunderbird (RHSA-2022:8544)
2022-11-21 00:00:00
centos
centos
thunderbird security update
2022-11-30 22:59:37
firefox security update
2022-11-30 22:58:26
osv
osv
Important: firefox security update
2022-11-21 00:00:00
Important: firefox security update
2022-11-21 12:37:04
firefox-esr - security update
2022-11-17 00:00:00
debian
debian
[SECURITY] [DLA 3196-1] thunderbird security update
2022-11-17 11:54:17
[SECURITY] [DSA 5284-1] thunderbird security update
2022-11-17 19:02:16
[SECURITY] [DSA 5282-1] firefox-esr security update
2022-11-16 19:36:41
oraclelinux
oraclelinux
firefox security update
2022-11-24 00:00:00
thunderbird security update
2022-11-22 00:00:00
thunderbird security update
2022-11-24 00:00:00
slackware
slackware
[slackware-security] mozilla-firefox
2022-11-17 02:00:08
[slackware-security] mozilla-thunderbird
2022-11-17 02:00:24
redhat
redhat
(RHSA-2022:8544) Important: thunderbird security update
2022-11-21 11:11:27
(RHSA-2022:8545) Important: thunderbird security update
2022-11-21 11:14:50
(RHSA-2022:8580) Important: firefox security update
2022-11-22 13:22:40
mozilla
mozilla
Security Vulnerabilities fixed in Firefox ESR 102.5 — Mozilla
2022-11-15 00:00:00
Security Vulnerabilities fixed in Thunderbird 102.5 — Mozilla
2022-11-15 00:00:00
Security Vulnerabilities fixed in Firefox 107 — Mozilla
2022-11-15 00:00:00
rocky
rocky
firefox security update
2023-01-30 05:25:59
thunderbird security update
2022-11-21 11:16:30
firefox security update
2022-11-21 12:37:04
almalinux
almalinux
Important: firefox security update
2022-11-22 00:00:00
Important: firefox security update
2022-11-21 00:00:00
Important: thunderbird security update
2022-11-21 00:00:00
gentoo
gentoo
Mozilla Thunderbird: Multiple Vulnerabilities
2022-11-22 00:00:00
Mozilla Firefox: Multiple Vulnerabilities
2022-11-22 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 10 package thunderbird version 102.5.0-alt1
2022-11-24 00:00:00
Security fix for the ALT Linux 10 package firefox-esr version 102.5.0-alt1
2022-11-16 00:00:00
kaspersky
kaspersky
KLA20050 Multiple vulnerabilities in Mozilla Firefox ESR
2022-11-15 00:00:00
KLA20051 Multiple vulnerabilities in Mozilla Thunderbird
2022-11-15 00:00:00
KLA20049 Multiple vulnerabilities in Mozilla Firefox
2022-11-15 00:00:00
mageia
mageia
Updated thunderbird packages fix security vulnerability
2022-11-17 23:45:15
Updated firefox packages fix security vulnerability
2022-11-17 23:45:15
ubuntu
ubuntu
Firefox vulnerabilities
2022-11-16 00:00:00
Thunderbird vulnerabilities
2023-02-06 00:00:00
photon
photon
Critical Photon OS Security Update - PHSA-2023-5.0-0035
2023-06-22 00:00:00
CVSS3
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
EPSS
0.001
Percentile
50.6%
Related for NVD:CVE-2022-45405