Lucene search
Veracode Vulnerability DatabaseVERACODE:33635HistoryJan 14, 2022 - 5:54 a.m.
Command Injection
2022-01-1405:54:18
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
11
0.001 Low
EPSS
Percentile
44.7%
firefox is vulnerable to command injection. The vulnerability exists due to the lack of throttling on external protocol launch dialog allowing an attacker to trick users into accepting launching a program to handle an external URL protocol.
References
access.redhat.com/errata/RHSA-2022:0126
access.redhat.com/security/updates/classification/#important
bugzilla.mozilla.org/show_bug.cgi?id=1744158
bugzilla.redhat.com/show_bug.cgi?id=2039573
www.mozilla.org/security/advisories/mfsa2022-01/
www.mozilla.org/security/advisories/mfsa2022-02/
www.mozilla.org/security/advisories/mfsa2022-03/
Related
redhatcve
redhatcve
CVE-2022-22739
2022-01-12 23:23:42
ubuntucve
ubuntucve
CVE-2022-22739
2022-01-13 00:00:00
cvelist
cvelist
CVE-2022-22739
2022-12-22 00:00:00
cve
cve
CVE-2022-22739
2022-12-22 20:15:14
prion
prion
Design/Logic Flaw
2022-12-22 20:15:00
nvd
nvd
CVE-2022-22739
2022-12-22 20:15:14
alpinelinux
alpinelinux
CVE-2022-22739
2022-12-22 20:15:14
debiancve
debiancve
CVE-2022-22739
2022-12-22 20:15:14
nessus
nessus
Scientific Linux Security Update : firefox on SL7.x i686/x86_64 (2022:0124)
2022-01-13 00:00:00
RHEL 7 : thunderbird (RHSA-2022:0127)
2022-01-13 00:00:00
RHEL 8 : firefox (RHSA-2022:0126)
2022-01-13 00:00:00
openvas
openvas
Mageia: Security Advisory (MGASA-2022-0019)
2022-01-28 00:00:00
redhat
redhat
(RHSA-2022:0124) Important: firefox security update
2022-01-12 11:24:47
(RHSA-2022:0125) Important: firefox security update
2022-01-12 11:26:32
(RHSA-2022:0132) Important: firefox security update
2022-01-12 11:30:56
osv
osv
firefox-esr - security update
2022-01-13 00:00:00
Important: firefox security update
2022-01-12 11:30:14
Important: thunderbird security update
2022-01-12 11:29:46
debian
debian
[SECURITY] [DSA 5044-1] firefox-esr security update
2022-01-13 18:47:15
[SECURITY] [DLA 2881-1] thunderbird security update
2022-01-16 10:56:46
[SECURITY] [DSA 5045-1] thunderbird security update
2022-01-14 18:25:24
centos
centos
thunderbird security update
2022-01-18 13:44:49
firefox security update
2022-01-18 13:44:03
oraclelinux
oraclelinux
firefox security update
2022-01-12 00:00:00
firefox security update
2022-01-13 00:00:00
thunderbird security update
2022-01-13 00:00:00
almalinux
almalinux
Important: firefox security update
2022-01-12 11:30:14
Important: thunderbird security update
2022-01-12 11:29:46
mageia
mageia
Updated nss and firefox packages fix security vulnerabilities
2022-01-12 02:22:28
Updated thunderbird packages fix security vulnerability
2022-01-16 23:39:09
rocky
rocky
thunderbird security update
2022-01-12 11:29:46
firefox security update
2022-01-12 11:30:14
redos
redos
ROS-20220114-01
2022-01-14 00:00:00
kaspersky
kaspersky
KLA12416 Multiple vulnerabilities in Mozilla Firefox ESR
2022-01-11 00:00:00
KLA12417 Multiple vulnerabilities in Mozilla Thunderbird
2022-01-11 00:00:00
KLA12415 Multiple vulnerabilities in Mozilla Firefox
2022-01-11 00:00:00
mozilla
mozilla
Security Vulnerabilities fixed in Firefox ESR 91.5 — Mozilla
2022-01-11 00:00:00
Security Vulnerabilities fixed in Thunderbird 91.5 — Mozilla
2022-01-11 00:00:00
Security Vulnerabilities fixed in Firefox 96 — Mozilla
2022-01-11 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 10 package thunderbird version 91.5.0-alt1
2022-01-20 00:00:00
Security fix for the ALT Linux 10 package firefox-esr version 91.5.0-alt1
2022-01-19 00:00:00
suse
suse
Security update for MozillaFirefox (moderate)
2022-05-18 00:00:00
Security update for MozillaThunderbird (important)
2022-01-26 00:00:00
ubuntu
ubuntu
Firefox vulnerabilities
2022-01-13 00:00:00
Thunderbird vulnerabilities
2022-01-21 00:00:00
Thunderbird vulnerabilities
2022-01-21 00:00:00
hivepro
hivepro
Mozilla Firefox patches multiple vulnerabilities
2022-01-12 07:57:08
amazon
amazon
Important: thunderbird
2022-03-07 23:34:00
Important: thunderbird
2022-07-06 03:17:00
ibm
ibm
gentoo
gentoo
Mozilla Firefox: Multiple vulnerabilities
2022-02-21 00:00:00
Mozilla Thunderbird: Multiple Vulnerabilities
2022-08-10 00:00:00