Remote Code Execution (RCE)

2022-06-1319:22:22

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.003 Low

EPSS

Percentile

68.0%

JSON

firefox is vulnerable to remote code execution. The vulnerability exists due to a lack of sanitization allowing an attacker to crash the system or run program as your login if it opens a malicious website.

CPENameOperatorVersion
firefox:sideq81.0-2
firefox:sideq83.0-1
firefox:sideq82.0.3-1
firefox:bioniceq80.0+build2-0ubuntu0.18.04.1
firefox:bioniceq92.0+build3-0ubuntu0.18.04.1
firefox:bioniceq80.0.1+build1-0ubuntu0.18.04.1
firefox:bioniceq59.0.2+build1-0ubuntu1
firefox:bioniceq83.0+build2-0ubuntu0.18.04.2
firefox:focaleq80.0+build2-0ubuntu0.20.04.1
firefox:focaleq75.0+build3-0ubuntu1

Name	Operator	Version
firefox:sid	eq	81.0-2
firefox:sid	eq	83.0-1
firefox:sid	eq	82.0.3-1
firefox:bionic	eq	80.0+build2-0ubuntu0.18.04.1
firefox:bionic	eq	92.0+build3-0ubuntu0.18.04.1
firefox:bionic	eq	80.0.1+build1-0ubuntu0.18.04.1
firefox:bionic	eq	59.0.2+build1-0ubuntu1
firefox:bionic	eq	83.0+build2-0ubuntu0.18.04.2
firefox:focal	eq	80.0+build2-0ubuntu0.20.04.1
firefox:focal	eq	75.0+build3-0ubuntu1

Rows per page:

1-10 of 491

References

bugzilla.mozilla.org/buglist.cgi?bug_id=1713773%2C1762201%2C1762469%2C1762770%2C1764878%2C1765226%2C1765782%2C1765973%2C1767177%2C1767181%2C1768232%2C1768251%2C1769869

security-tracker.debian.org/tracker/CVE-2022-31748

www.mozilla.org/security/advisories/mfsa2022-20/