Lucene search
PRIOn knowledge basePRION:CVE-2022-46874HistoryDec 22, 2022 - 8:15 p.m.
Design/Logic Flaw
2022-12-2220:15:00
PRIOn knowledge base
www.prio-n.com
7
filename truncation
malicious extension
user confusion
execution of code
thunderbird
firefox esr
A file with a long filename could have had its filename truncated to remove the valid extension, leaving a malicious extension in its place. This could potentially led to user confusion and the execution of malicious code.<br />Note: This issue was originally included in the advisories for Thunderbird 102.6, but a patch (specific to Thunderbird) was omitted, resulting in it actually being fixed in Thunderbird 102.6.1. This vulnerability affects Firefox < 108, Thunderbird < 102.6.1, Thunderbird < 102.6, and Firefox ESR < 102.6.
| CPE | Name | Operator | Version |
|---|---|---|---|
| firefox | lt | 108.0 | |
| firefox_esr | lt | 102.6 | |
| thunderbird | lt | 102.6 |
References
bugzilla.mozilla.org/show_bug.cgi?id=1746139
security.gentoo.org/glsa/202305-06
security.gentoo.org/glsa/202305-13
www.mozilla.org/security/advisories/mfsa2022-51/
www.mozilla.org/security/advisories/mfsa2022-52/
www.mozilla.org/security/advisories/mfsa2022-53/
www.mozilla.org/security/advisories/mfsa2022-54/
Related
slackware
slackware
[slackware-security] mozilla-thunderbird
2022-12-22 03:47:13
[slackware-security] mozilla-firefox
2022-12-14 21:30:17
[slackware-security] mozilla-thunderbird
2022-12-14 21:30:37
ubuntucve
ubuntucve
CVE-2022-46874
2022-12-14 00:00:00
mageia
mageia
Updated thunderbird packages fix security vulnerability
2022-12-31 01:39:00
Updated firefox packages fix security vulnerability
2022-12-17 23:37:44
Updated thunderbird packages fix security vulnerability
2022-12-17 23:37:44
cvelist
cvelist
CVE-2022-46874
2022-12-22 00:00:00
redhatcve
redhatcve
CVE-2022-46874
2022-12-14 16:04:59
cve
cve
CVE-2022-46874
2022-12-22 20:15:46
altlinux
altlinux
Security fix for the ALT Linux 10 package thunderbird version 102.6.1-alt1
2022-12-29 00:00:00
Security fix for the ALT Linux 10 package thunderbird version 102.6.0-alt1
2022-12-23 00:00:00
Security fix for the ALT Linux 10 package firefox-esr version 102.6.0-alt1
2022-12-22 00:00:00
nessus
nessus
Mozilla Thunderbird < 102.6.1
2022-12-22 00:00:00
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2022:4636-1)
2022-12-30 00:00:00
Mageia: Security Advisory (MGASA-2022-0484)
2023-01-02 00:00:00
Mozilla Thunderbird Security Advisories (MFSA2022-54, MFSA2022-54) - Windows
2022-12-29 00:00:00
alpinelinux
alpinelinux
CVE-2022-46874
2022-12-22 20:15:46
nvd
nvd
CVE-2022-46874
2022-12-22 20:15:46
mozilla
mozilla
Security Vulnerabilities fixed in Thunderbird 102.6.1 — Mozilla
2022-12-20 00:00:00
Security Vulnerabilities fixed in Firefox ESR 102.6 — Mozilla
2022-12-13 00:00:00
Security Vulnerabilities fixed in Thunderbird 102.6 — Mozilla
2022-12-13 00:00:00
veracode
veracode
Remote Code Execution
2022-12-15 23:25:36
debiancve
debiancve
CVE-2022-46874
2022-12-22 20:15:46
oraclelinux
oraclelinux
firefox security update
2022-12-16 00:00:00
firefox security update
2022-12-15 00:00:00
firefox security update
2022-12-16 00:00:00
debian
debian
[SECURITY] [DLA 3241-1] firefox-esr security update
2022-12-15 18:16:56
[SECURITY] [DLA 3242-1] thunderbird security update
2022-12-15 18:22:21
[SECURITY] [DSA 5301-1] firefox-esr security update
2022-12-14 18:15:26
osv
osv
thunderbird - security update
2022-12-15 00:00:00
Important: firefox security update
2022-12-15 00:00:00
firefox-esr - security update
2022-12-15 00:00:00
rocky
rocky
firefox security update
2022-12-15 15:32:10
thunderbird security update
2023-01-14 01:54:53
redhat
redhat
(RHSA-2022:9068) Important: firefox security update
2022-12-15 15:32:46
(RHSA-2022:9069) Important: firefox security update
2022-12-15 15:38:06
(RHSA-2022:9065) Important: firefox security update
2022-12-15 15:31:09
almalinux
almalinux
Important: firefox security update
2022-12-15 00:00:00
Important: firefox security update
2022-12-15 00:00:00
Important: thunderbird security update
2022-12-15 00:00:00
ubuntu
ubuntu
Firefox vulnerabilities
2022-12-15 00:00:00
Firefox regressions
2023-01-05 00:00:00
Firefox regressions
2023-01-10 00:00:00
ibm
ibm
kaspersky
kaspersky
KLA20114 Multiple vulnerabilities in Mozilla Firefox ESR
2022-12-13 00:00:00
KLA20115 Multiple vulnerabilities in Mozilla Thunderbird
2022-12-13 00:00:00
KLA20113 Multiple vulnerabilities in Mozilla Firefox
2022-12-13 00:00:00
gentoo
gentoo
Mozilla Thunderbird: Multiple Vulnerabilities
2023-05-03 00:00:00
Mozilla Firefox: Multiple Vulnerabilities
2023-05-03 00:00:00
amazon
amazon
Important: thunderbird
2023-02-17 00:11:00
Important: thunderbird
2023-02-17 00:11:00
photon
photon
Critical Photon OS Security Update - PHSA-2023-5.0-0035
2023-06-22 00:00:00