PT-2021-5402 · Mozilla +7 · Firefox Esr +9

🗓️ 05 Oct 2021 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 18 Views

HTTP2 use-after-free may allow remote code execution; update Firefox before 93 and Thunderbird before 91.3

Reporter	Title	Published	Views	Family All 1000
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities of Mozilla Firefox (less than Firefox 78.14.0 ESR +CVE-2021-38493) have affected Synthetic Playback Agent 8.1.4.0-8.1.4 IF14	15 Dec 202113:44	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Mozilla Firefox affect IBM Cloud Pak for Multicloud Management Monitoring	18 May 202111:41	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities of Mozilla Firefox (less than Firefox 68.12.0 ESR + CVE-2020-15659) have affected Synthetic Playback Agent 8.1.4.0-8.1.4 IF11 + ICAM2019.3.0 - 2020.2.0	27 Sep 202010:38	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Guardium is affected by multiple vulnerabilities	29 Apr 202502:26	–	ibm
IBM Security Bulletins	Security Bulletin: Due to use of Mozilla Firefox, IBM Cloud Pak for Multicloud Management Monitoring is vulnerable to multiple vulnerabilities.	31 Aug 202311:04	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities of Mozilla Firefox (less than Firefox 68.12.0 ESR + CVE-2020-15664) hava affected Synthetic Playback Agent 8.1.4.0-8.1.4 IF11 + ICAM2019.3.0 - 2020.2.0	27 Sep 202009:09	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities of Mozilla Firefox (less than Firefox 68.5.0 ESR) have affected Synthetic Playback Agent 8.1.4.0-8.1.4 IF10 + ICAM 3.0 - 4.0	1 Apr 202010:50	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to multiple Base OS issues	19 Jun 202517:28	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities of Mozilla Firefox (less than Firefox 68.9.0 ESR + CVE-2020-12410) hava affected Synthetic Playback Agent 8.1.4.0-8.1.4 IF11 + ICAM2019.3.0 - 2020.2.0	1 Sep 202010:37	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities of Mozilla Firefox (less than Firefox 102.4ESR) have affected Synthetic Playback Agent 8.1.4.0-8.1.4 IF16 - 2022.4.0	29 Nov 202207:01	–	ibm

Source	Link
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/firefox_jit_use_after_free.rb
github	www.github.com/mistymntncop/CVE-2022-1802
github	www.github.com/0vercl0k/CVE-2022-28281
github	www.github.com/mistymntncop/CVE-2022-26485
github	www.github.com/aleksejspopovs/cve-2020-16012
github	www.github.com/rojhack/CVE-2020-6514
github	www.github.com/R0jhack/CVE-2020-6514
github	www.github.com/hasan-khalil/CVE-2020-6514
github	www.github.com/HassanAzze/CVE-2020-6514
web	www.web.archive.org/web/20250000000000*/https:/github.com/MagicPwnrin/CVE-2022-28282

11 Jul 2023 00:00Current

7.9High risk

Vulners AI Score7.9

CVSS 3.19.8 - 10

CVSS 210

EPSS0.44303

SSVC