Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Settings
Sign in

PT-2022-1782 · Mozilla +10 · Firefox +14

🗓️ 05 Mar 2022 00:00:00Reported by Positive TechnologiesType 
ptsecurity
 ptsecurity🔗 dbugs.ptsecurity.com👁 13 Views

Use-after-free when removing a stylesheet parameter could allow remote code execution.

Related
Refs
ReporterTitlePublishedViews
Family
bdu_fstec
BDU FSTEC		The vulnerability affects implementations of protocols that transmit data to Microsoft applications, Mozilla Firefox, Mozilla Firefox ESR, and the email client Thunderbird. This allows a perpetrator to execute arbitrary code.
1 Jul 202200:00
–bdu_fstec
bdu_fstec
BDU FSTEC		The vulnerability of Firefox browsers, Firefox ESR, and the Thunderbird email client relates to the execution of operations beyond the buffer in memory, allowing an attacker to execute arbitrary code.
1 Jul 202200:00
–bdu_fstec
bdu_fstec
BDU FSTEC		The vulnerability of Firefox browsers, related to the execution of operations beyond the buffer in memory, allows attackers to execute arbitrary code.
1 Jul 202200:00
–bdu_fstec
bdu_fstec
BDU FSTEC		The vulnerability of the nsSHistory function in Thunderbird email clients, as well as in Firefox and Firefox ESR browsers, allows a hacker to execute arbitrary code.
1 Jul 202200:00
–bdu_fstec
bdu_fstec
BDU FSTEC		The vulnerability of the Mozilla Firefox browser, related to errors during HTML sanitization, allows attackers to compromise the integrity of protected information.
4 Jul 202200:00
–bdu_fstec
bdu_fstec
BDU FSTEC		The vulnerability of the `nsTArray_Impl::ReplaceElementsAt()` function in Thunderbird email clients, Firefox browsers, and Firefox ESR allows a malicious actor to execute arbitrary code.
4 Jul 202200:00
–bdu_fstec
bdu_fstec
BDU FSTEC		The vulnerability of the Thunderbird email client, as well as the Firefox and Firefox ESR browsers, stems from improper input validation during the processing of JavaScript attributes. This allows attackers to execute arbitrary JavaScript code.
4 Jul 202200:00
–bdu_fstec
bdu_fstec
BDU FSTEC		The vulnerability of Thunderbird email client, Firefox and Firefox ESR browsers relates to improper error handling when processing an inaccessible PAC file. This allows a malicious actor to specify a URL for the PAC file. If the server on which the PAC file is located becomes unavailable, OCSP requests are blocked, resulting in incorrect error pages being displayed.
4 Jul 202200:00
–bdu_fstec
bdu_fstec
BDU FSTEC		The vulnerability of the MediaError message in the Mozilla Firefox browser, which allows a violator to disclose protected information
4 Jul 202200:00
–bdu_fstec
bdu_fstec
BDU FSTEC		The vulnerability of the Mozilla Firefox browser, related to errors during HTML sanitization, allows a hacker to execute arbitrary code.
4 Jul 202200:00
–bdu_fstec
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
28 Nov 2024 00:00Current
7.7High risk
Vulners AI Score7.7
CVSS 3.19.8 - 10
CVSS 29.3
EPSS0.42327
SSVC
use-after-freestylesheet parameterremote code executionfirefox prior 97.0.2esr prior 91.6.1android prior 97.3.0thunderbird prior 91.6.2focus prior 97.3.0
13