Vulnerability CVE-2022-34484: Information

Description

The Mozilla Fuzzing Team reported potential vulnerabilities present in Thunderbird 91.10. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 102, Firefox ESR < 91.11, Thunderbird < 102, and Thunderbird < 91.11.

Severity: HIGH (8.8) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

URL: https://nvd.nist.gov/vuln/detail/CVE-2022-34484
Published: Dec. 22, 2022
Modified: Aug. 8, 2023
Error type identifier: CWE-416

Fixed packages

Package name
Branch
Fixed in version
Version from repository
Errata ID
Task #
State
firefoxsisyphus102.0-alt1126.0.1-alt1ALT-PU-2022-2151-1302831Fixed
firefoxp10105.0.1-alt0.p10.1118.0.2-alt0.p10.1ALT-PU-2022-2930-1307737Fixed
firefoxp9105.0.1-alt0.c9.1105.0.1-alt0.c9.1ALT-PU-2023-4339-1319683Fixed
firefoxc10f1105.0.1-alt0.p10.1112.0.2-alt0.p10.1ALT-PU-2022-2930-1307737Fixed
firefoxc9f2105.0.1-alt0.c9.1105.0.1-alt0.c9.1ALT-PU-2023-1139-1309126Fixed
firefoxp11102.0-alt1126.0.1-alt1ALT-PU-2022-2151-1302831Fixed
firefox-esrsisyphus91.11.0-alt1115.11.0-alt1ALT-PU-2022-2153-1302834Fixed
firefox-esrp10102.2.0-alt2115.11.0-alt1ALT-PU-2022-2929-1307737Fixed
firefox-esrp9102.6.0-alt0.c9.1102.11.0-alt0.c9.1ALT-PU-2023-4336-1319683Fixed
firefox-esrc10f1102.2.0-alt2115.9.1-alt0.c10.1ALT-PU-2022-2929-1307737Fixed
firefox-esrc9f2102.6.0-alt0.c9.1102.12.0-alt0.c9.1ALT-PU-2023-1138-1309126Fixed
firefox-esrp1191.11.0-alt1115.11.0-alt1ALT-PU-2022-2153-1302834Fixed
thunderbirdsisyphus102.2.0-alt1115.9.0-alt1ALT-PU-2022-2515-1304701Fixed
thunderbirdp10102.2.1-alt1115.9.0-alt1ALT-PU-2022-2931-1307737Fixed
thunderbirdp9102.7.1-alt1102.11.0-alt0.c9.1ALT-PU-2023-4335-1319683Fixed
thunderbirdc10f1102.2.1-alt1115.9.0-alt0.c10.1ALT-PU-2022-2931-1307737Fixed
thunderbirdc9f2102.6.1-alt1102.11.0-alt0.c9.1ALT-PU-2023-1137-1309126Fixed
thunderbirdp11102.2.0-alt1115.9.0-alt1ALT-PU-2022-2515-1304701Fixed

References to Advisories, Solutions, and Tools

Hyperlink
Resource
https://www.mozilla.org/security/advisories/mfsa2022-24/
  • Vendor Advisory
https://bugzilla.mozilla.org/buglist.cgi?bug_id=1763634%2C1772651
  • Exploit
  • Issue Tracking
  • Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2022-26/
  • Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2022-25/
  • Vendor Advisory

    1. Configuration 1

      cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*
      End excliding
      102.0
      cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*
      End excliding
      91.11
      cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*
      End excliding
      91.11
VKontakte|Telegram|YouTube|Forum|GitHub|Bugzilla
Version: v24.5.3
Back to top