PT-2021-6936 · Mozilla +7 · Firefox Esr +9

🗓️ 07 Dec 2021 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 8 Views

Memory safety and buffer overflow bug in Firefox and Thunderbird may allow remote code execution or denial of service.

Reporter	Title	Published	Views	Family All 1000
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities of Mozilla Firefox (less than Firefox 78.14.0 ESR +CVE-2021-38493) have affected Synthetic Playback Agent 8.1.4.0-8.1.4 IF14	15 Dec 202113:44	–	ibm
IBM Security Bulletins	Security Bulletin: Due to use of Mozilla Firefox, IBM Cloud Pak for Multicloud Management Monitoring is vulnerable to multiple vulnerabilities.	31 Aug 202311:04	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities of Mozilla Firefox (less than Firefox 102.4ESR) have affected Synthetic Playback Agent 8.1.4.0-8.1.4 IF16 - 2022.4.0	29 Nov 202207:01	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Mozilla Firefox affect IBM Cloud Pak for Multicloud Management Monitoring.	31 Jan 202314:47	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities of Mozilla Firefox (less than Firefox 102.2ESR) have affected Synthetic Playback Agent 8.1.4.0-8.1.4 IF16 - 2022.4.0	15 Nov 202205:24	–	ibm
ALT Linux	Security fix for the ALT Linux 10 package thunderbird version 91.10.0-alt1	3 Jun 202200:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 10 package thunderbird version 102.8.0-alt1	10 Mar 202300:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 10 package firefox-esr version 91.3.0-alt1	9 Nov 202100:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 10 package firefox-esr version 102.3.0-alt1	10 Oct 202200:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 10 package thunderbird version 102.6.1-alt1	29 Dec 202200:00	–	altlinux

Source	Link
github	www.github.com/mistymntncop/CVE-2022-1802
github	www.github.com/0vercl0k/CVE-2022-28281
github	www.github.com/mistymntncop/CVE-2022-26485
web	www.web.archive.org/web/20250000000000*/https:/github.com/MagicPwnrin/CVE-2022-28282
bugzilla	www.bugzilla.mozilla.org/buglist.cgi
web	www.web.archive.org/web/20250000000000*/https:/github.com/Pwnrin/CVE-2022-28282
advisories	www.advisories.mageia.org/MGASA-2021-0551.html
errata	www.errata.altlinux.org/ALT-PU-2021-3576
safe-surf	www.safe-surf.ru/specialists/bulletins-nkcki/684406
bdu	www.bdu.fstec.ru/vul/2022-02371

08 Aug 2023 00:00Current

9.2Critical risk

Vulners AI Score9.2

CVSS 27.5 - 10

CVSS 3.19.8 - 10

EPSS0.26709

SSVC