USN-5370-1

Dashboard / Vulnerabilities / USN-5370-1

USN-5370-1

Summary: firefox vulnerabilities

Details: Multiple security issues were discovered in Firefox. If a user were tricked into opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, execute script unexpectedly, obtain sensitive information, conduct spoofing attacks, or execute arbitrary code. (CVE-2022-1097, CVE-2022-24713, CVE-2022-28281, CVE-2022-28282, CVE-2022-28284, CVE-2022-28285, CVE-2022-28286, CVE-2022-28288, CVE-2022-28289) A security issue was discovered with the sourceMapURL feature of devtools. An attacker could potentially exploit this to include local files that should have been inaccessible. (CVE-2022-28283) It was discovered that selecting text caused Firefox to crash in some circumstances. An attacker could potentially exploit this to cause a denial of service. (CVE-2022-28287)

References: https://ubuntu.com/security/notices/USN-5370-1, https://ubuntu.com/security/CVE-2022-1097, https://ubuntu.com/security/CVE-2022-24713, https://ubuntu.com/security/CVE-2022-28281, https://ubuntu.com/security/CVE-2022-28282, https://ubuntu.com/security/CVE-2022-28283, https://ubuntu.com/security/CVE-2022-28284, https://ubuntu.com/security/CVE-2022-28285, https://ubuntu.com/security/CVE-2022-28286, https://ubuntu.com/security/CVE-2022-28287, https://ubuntu.com/security/CVE-2022-28288, https://ubuntu.com/security/CVE-2022-28289