CVE-2022-28281

Description

If a compromised content process sent an unexpected number of WebAuthN Extensions in a Register command to the parent process, an out of bounds write would have occurred leading to memory corruption and a potentially exploitable crash. This vulnerability affects Thunderbird < 91.8, Firefox < 99, and Firefox ESR < 91.8.

CVSS Metrics

• v3.1•HIGH•Score: 8.8CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS Trends

Current EPSS score: 15.74%• Percentile: 95%

Techniques & Countermeasures

• CWE-787•Out-of-bounds Write

  The product writes data past the end, or before the beginning, of the intended buffer.

Affected Systems

• mozilla•firefox

  ≥ unspecified, < 99 | < 99.0

• mozilla•firefox_esr

  ≥ unspecified, < 91.8 | < 91.8

• mozilla•thunderbird

  ≥ unspecified, < 91.8 | < 91.8

References (4)

• https://www.mozilla.org/security/advisories/mfsa2022-13/
• https://www.mozilla.org/security/advisories/mfsa2022-14/
• https://www.mozilla.org/security/advisories/mfsa2022-15/
• https://bugzilla.mozilla.org/show_bug.cgi?id=1755621