If a user was convinced to drag and drop an image to their desktop or other folder, the resulting object could have been changed into an executable script which would have run arbitrary code after the user clicked on it. This vulnerability affects Firefox < 97, Thunderbird < 91.6, and Firefox ESR < 91.6.
References
| Link | Resource |
|---|---|
| https://bugzilla.mozilla.org/show_bug.cgi?id=1317873 | Exploit Issue Tracking Vendor Advisory |
| https://www.mozilla.org/security/advisories/mfsa2022-04/ | Vendor Advisory |
| https://www.mozilla.org/security/advisories/mfsa2022-05/ | Vendor Advisory |
| https://www.mozilla.org/security/advisories/mfsa2022-06/ | Vendor Advisory |
| https://bugzilla.mozilla.org/show_bug.cgi?id=1317873 | Exploit Issue Tracking Vendor Advisory |
| https://www.mozilla.org/security/advisories/mfsa2022-04/ | Vendor Advisory |
| https://www.mozilla.org/security/advisories/mfsa2022-05/ | Vendor Advisory |
| https://www.mozilla.org/security/advisories/mfsa2022-06/ | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
16 Apr 2025, 15:15
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-94 |
21 Nov 2024, 06:47
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://bugzilla.mozilla.org/show_bug.cgi?id=1317873 - Exploit, Issue Tracking, Vendor Advisory | |
| References | () https://www.mozilla.org/security/advisories/mfsa2022-04/ - Vendor Advisory | |
| References | () https://www.mozilla.org/security/advisories/mfsa2022-05/ - Vendor Advisory | |
| References | () https://www.mozilla.org/security/advisories/mfsa2022-06/ - Vendor Advisory |
Information
Published : 2022-12-22 20:15
Updated : 2025-04-16 15:15
NVD link : CVE-2022-22756
Mitre link : CVE-2022-22756
CVE.ORG link : CVE-2022-22756
JSON object : View
Products Affected
mozilla
- thunderbird
- firefox
- firefox_esr
CWE