Lucene search
Veracode Vulnerability DatabaseVERACODE:38500HistoryDec 15, 2022 - 11:25 p.m.
Remote Code Execution
2022-12-1523:25:36
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
20
firefox
remote code execution
vulnerability
filename truncation
malicious code
EPSS
0.011
Percentile
84.8%
firefox is vulnerable to Remote Code Execution. A file with a long filename could have had its filename truncated to remove the valid extension, leaving a malicious extension in its place. This could potentially led to user confusion and the execution of malicious code.
References
git://git.launchpad.net/ubuntu-cve-tracker/tree/active/CVE-2022-46874
bugzilla.mozilla.org/show_bug.cgi?id=1746139
security.gentoo.org/glsa/202305-06
security.gentoo.org/glsa/202305-13
www.mozilla.org/security/advisories/mfsa2022-51/
www.mozilla.org/security/advisories/mfsa2022-52/
www.mozilla.org/security/advisories/mfsa2022-53/
www.mozilla.org/security/advisories/mfsa2022-54/
Related
nessus
nessus
Mozilla Thunderbird < 102.6.1
2022-12-22 00:00:00
Mozilla Thunderbird < 102.6.1
2022-12-22 00:00:00
alpinelinux
alpinelinux
CVE-2022-46874
2022-12-22 20:15:46
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2022:4636-1)
2022-12-30 00:00:00
Slackware: Security Advisory (SSA:2022-355-01)
2022-12-22 00:00:00
nvd
nvd
CVE-2022-46874
2022-12-22 20:15:46
prion
prion
Design/Logic Flaw
2022-12-22 20:15:00
slackware
slackware
[slackware-security] mozilla-thunderbird
2022-12-22 03:47:13
[slackware-security] mozilla-firefox
2022-12-14 21:30:17
[slackware-security] mozilla-thunderbird
2022-12-14 21:30:37
ubuntucve
ubuntucve
CVE-2022-46874
2022-12-14 00:00:00
mageia
mageia
Updated thunderbird packages fix security vulnerability
2022-12-31 01:39:00
Updated firefox packages fix security vulnerability
2022-12-17 23:37:44
Updated thunderbird packages fix security vulnerability
2022-12-17 23:37:44
debiancve
debiancve
CVE-2022-46874
2022-12-22 20:15:46
mozilla
mozilla
Security Vulnerabilities fixed in Thunderbird 102.6.1 — Mozilla
2022-12-20 00:00:00
Security Vulnerabilities fixed in Firefox ESR 102.6 — Mozilla
2022-12-13 00:00:00
Security Vulnerabilities fixed in Thunderbird 102.6 — Mozilla
2022-12-13 00:00:00
redhatcve
redhatcve
CVE-2022-46874
2022-12-14 16:04:59
altlinux
altlinux
Security fix for the ALT Linux 10 package thunderbird version 102.6.1-alt1
2022-12-29 00:00:00
Security fix for the ALT Linux 10 package thunderbird version 102.6.0-alt1
2022-12-23 00:00:00
Security fix for the ALT Linux 10 package firefox-esr version 102.6.0-alt1
2022-12-22 00:00:00
cvelist
cvelist
CVE-2022-46874
2022-12-22 00:00:00
cve
cve
CVE-2022-46874
2022-12-22 20:15:46
osv
osv
firefox-esr - security update
2022-12-14 00:00:00
Important: firefox security update
2022-12-15 00:00:00
firefox-esr - security update
2022-12-15 00:00:00
oraclelinux
oraclelinux
firefox security update
2022-12-16 00:00:00
firefox security update
2022-12-15 00:00:00
firefox security update
2022-12-16 00:00:00
almalinux
almalinux
Important: firefox security update
2022-12-15 00:00:00
Important: firefox security update
2022-12-15 00:00:00
Important: thunderbird security update
2022-12-15 00:00:00
redhat
redhat
(RHSA-2022:9067) Important: firefox security update
2022-12-15 15:32:10
(RHSA-2022:9072) Important: firefox security update
2022-12-15 15:41:01
(RHSA-2022:9066) Important: firefox security update
2022-12-15 15:31:40
rocky
rocky
firefox security update
2022-12-15 15:32:10
thunderbird security update
2023-01-14 01:54:53
debian
debian
[SECURITY] [DSA 5301-1] firefox-esr security update
2022-12-14 18:15:26
[SECURITY] [DLA 3242-1] thunderbird security update
2022-12-15 18:22:21
[SECURITY] [DLA 3241-1] firefox-esr security update
2022-12-15 18:16:56
kaspersky
kaspersky
KLA20114 Multiple vulnerabilities in Mozilla Firefox ESR
2022-12-13 00:00:00
KLA20115 Multiple vulnerabilities in Mozilla Thunderbird
2022-12-13 00:00:00
KLA20113 Multiple vulnerabilities in Mozilla Firefox
2022-12-13 00:00:00
ubuntu
ubuntu
Firefox regressions
2023-01-05 00:00:00
Firefox vulnerabilities
2022-12-15 00:00:00
Firefox regressions
2023-01-10 00:00:00
ibm
ibm
gentoo
gentoo
Mozilla Thunderbird: Multiple Vulnerabilities
2023-05-03 00:00:00
Mozilla Firefox: Multiple Vulnerabilities
2023-05-03 00:00:00
amazon
amazon
Important: thunderbird
2023-02-17 00:11:00
Important: thunderbird
2023-02-17 00:11:00
photon
photon
Critical Photon OS Security Update - PHSA-2023-5.0-0035
2023-06-22 00:00:00