firefox-esr:sid is vulnerable to Use-after-free. The vulnerability exist in VR Process destruction which allows an attacker to cause an application crash.

CPENameOperatorVersion
firefox-esr:sideq78.8.0esr-1
firefox-esr:sideq78.5.0esr-1
firefox-esr:3.15eq91.3.0-r0
firefox-esr:3.15eq91.4.0-r0
firefox-esr:3.15eq91.6.1-r0
firefox-esr:3.15eq91.6.0-r0
firefox-esr:3.15eq91.7.1-r0
firefox-esr:3.15eq91.5.0-r0
firefox-esr:3.15eq91.2.0-r1
firefox-esr:3.15eq91.7.0-r0

Name	Operator	Version
firefox-esr:sid	eq	78.8.0esr-1
firefox-esr:sid	eq	78.5.0esr-1
firefox-esr:3.15	eq	91.3.0-r0
firefox-esr:3.15	eq	91.4.0-r0
firefox-esr:3.15	eq	91.6.1-r0
firefox-esr:3.15	eq	91.6.0-r0
firefox-esr:3.15	eq	91.7.1-r0
firefox-esr:3.15	eq	91.5.0-r0
firefox-esr:3.15	eq	91.2.0-r1
firefox-esr:3.15	eq	91.7.0-r0

Rows per page:

1-10 of 9581

References

bugzilla.mozilla.org/show_bug.cgi?id=1750679

security-tracker.debian.org/tracker/CVE-2022-1196

www.mozilla.org/security/advisories/mfsa2022-14/

www.mozilla.org/security/advisories/mfsa2022-15/

cnvd 1

prion 1

cve 1

ubuntucve 1

alpinelinux 1

redhatcve 1

debiancve 1

nessus 34

openvas 17

slackware 2

oraclelinux 4

osv 9

almalinux 2

mozilla 2

rocky 2

suse 2

debian 4

altlinux 2

redos 2

redhat 10

ubuntu 1

kaspersky 2

amazon 1

mageia 2

ibm 2

gentoo 2

cnvd

Mozilla Firefox Resource Management Error Vulnerability (CNVD-2023-03067)

2022-12-30 00:00:00

prion

Code injection

2022-12-22 20:15:00

cve

CVE-2022-1196

2022-12-22 20:15:00

ubuntucve

CVE-2022-1196

2022-04-06 00:00:00

alpinelinux

CVE-2022-1196

2022-12-22 20:15:00

redhatcve

CVE-2022-1196

2022-04-06 14:53:45

debiancve

CVE-2022-1196

2022-12-22 20:15:00

nessus

Slackware Linux 15.0 / current mozilla-firefox Multiple Vulnerabilities (SSA:2022-095-01)

2022-04-05 00:00:00

Mozilla Firefox ESR < 91.8

2022-04-05 00:00:00

Scientific Linux Security Update : firefox on SL7.x i686/x86_64 (2022:1284)

2022-04-11 00:00:00

openvas

Slackware: Security Advisory (SSA:2022-095-01)

2022-04-21 00:00:00

Debian: Security Advisory (DLA-2971-1)

2022-04-08 00:00:00

SUSE: Security Advisory (SUSE-SU-2022:1127-1)

2022-04-08 00:00:00

slackware

[slackware-security] mozilla-firefox

2022-04-05 19:19:02

[slackware-security] mozilla-thunderbird

2022-04-06 20:29:58

oraclelinux

firefox security update

2022-04-08 00:00:00

firefox security update

2022-04-08 00:00:00

thunderbird security update

2022-04-11 00:00:00

osv

firefox-esr - security update

2022-04-07 00:00:00

Important: firefox security update

2022-04-08 13:40:04

Important: firefox security update

2022-04-08 13:40:04

almalinux

Important: firefox security update

2022-04-08 13:40:04

Important: thunderbird security update

2022-04-11 13:29:58

mozilla

Security Vulnerabilities fixed in Firefox ESR 91.8 — Mozilla

2022-04-05 00:00:00

Security Vulnerabilities fixed in Thunderbird 91.8 — Mozilla

2022-04-05 00:00:00

rocky

firefox security update

2022-04-08 13:40:04

thunderbird security update

2022-04-11 13:29:58

suse

Security update for MozillaFirefox (important)

2022-04-07 00:00:00

Security update for MozillaThunderbird (important)

2022-04-13 00:00:00

debian

[SECURITY] [DSA 5113-1] firefox-esr security update

2022-04-06 17:11:21

[SECURITY] [DLA 2971-1] firefox-esr security update

2022-04-07 08:43:52

[SECURITY] [DLA 2978-1] thunderbird security update

2022-04-11 14:30:34

altlinux

Security fix for the ALT Linux 10 package firefox-esr version 91.8.0-alt1

2022-04-06 00:00:00

Security fix for the ALT Linux 10 package thunderbird version 91.8.0-alt1

2022-04-06 00:00:00

redos

ROS-20220412-03

2022-04-12 00:00:00

ROS-20220412-02

2022-04-12 00:00:00

redhat

(RHSA-2022:1287) Important: firefox security update

2022-04-08 13:40:04

(RHSA-2022:1285) Important: firefox security update

2022-04-08 13:33:48

(RHSA-2022:1284) Important: firefox security update

2022-04-08 13:32:17

ubuntu

Thunderbird vulnerabilities

2022-04-27 00:00:00

kaspersky

KLA12497 Multiple vulnerabilities in Mozilla Firefox ESR

2022-04-05 00:00:00

KLA12498 Multiple vulnerabilities in Mozilla Thunderbird

2022-03-07 00:00:00

amazon

Important: thunderbird

2022-04-25 23:45:00

mageia

Updated firefox/nss/rootcerts packages fix security vulnerability

2022-04-29 01:46:19

Updated thunderbird packages fix security vulnerabilities

2022-04-29 01:46:19

ibm

Security Bulletin: Multiple vulnerabilities of Mozilla Firefox (less than Firefox 91.8.0ESR) have affected Synthetic Playback Agent 8.1.4.0-8.1.4 IF16 - 2022.4.0

2022-04-29 04:43:11

Security Bulletin: Multiple vulnerabilities in Mozilla Firefox affect IBM Cloud Pak for Multicloud Management Monitoring.

2023-01-31 14:47:39

gentoo

Mozilla Firefox: Multiple Vulnerabilities

2022-08-10 00:00:00

Mozilla Thunderbird: Multiple Vulnerabilities

2022-08-10 00:00:00

Products

Security Intelligence
Non-intrusive assessment
Developers SDK
Windows scanner
Linux scanner
Perimeter control tool
MSSP

Database

Vulnerabilities
Exploits
IOC
Security News
BugBounty
Popular
Wild Exploited
Top Vulnerabilities

Tools

Linux Security Scanner
API integration
Subscriptions
Plugins
Manual Audit

Learn More

Stats
API
Docs
Api-keys
License
Pricing
Glossary
FAQ

Company

Blog
Contacts
About Us
OpenSource
EULA
Brand Guideline
Privacy Policy

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply. All product names, logos, and brands are property of their respective owners. All company, product and service names used in this website are for identification purposes only. Use of these names, logos, and brands does not imply endorsement.If you are an owner of some content and want it to be removed, please contact us. Using Vulners services you are accepting Vulners services end-user license agreement

@2024 Vulners Inc

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

JSON

Related for VERACODE:35016