CVE-2022-1196
Summary
| CVE | CVE-2022-1196 |
|---|
| State | PUBLIC |
|---|
| Assigner | [email protected] |
|---|
| Source Priority | CVE Program / NVD first with legacy fallback |
|---|
| Published | 2022-12-22 20:15:00 UTC |
|---|
| Updated | 2022-12-29 20:31:00 UTC |
|---|
| Description | After a VR Process is destroyed, a reference to it may have been retained and used, leading to a use-after-free and potentially exploitable crash. This vulnerability affects Thunderbird < 91.8 and Firefox ESR < 91.8. |
|---|
NVD Known Affected Configurations (CPE 2.3)
References
| Reference | Source | Link | Tags |
|---|
| Security Vulnerabilities fixed in Thunderbird 91.8 — Mozilla |
MISC |
www.mozilla.org |
|
| Security Vulnerabilities fixed in Firefox ESR 91.8 — Mozilla |
MISC |
www.mozilla.org |
|
| 1750679 - (CVE-2022-1196) heap-use-after-free of VRProcessParent |
MISC |
bugzilla.mozilla.org |
|
| CVE Program record |
CVE.ORG |
www.cve.org |
canonical |
| NVD vulnerability detail |
NVD |
nvd.nist.gov |
canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 159748 Oracle Enterprise Linux Security Update for firefox (ELSA-2022-1287)
- 159751 Oracle Enterprise Linux Security Update for firefox (ELSA-2022-1284)
- 159752 Oracle Enterprise Linux Security Update for thunderbird (ELSA-2022-1302)
- 159753 Oracle Enterprise Linux Security Update for thunderbird (ELSA-2022-1301)
- 179173 Debian Security Update for firefox-esr (DSA 5113-1)
- 179174 Debian Security Update for firefox-esr (DLA 2971-1)
- 179183 Debian Security Update for thunderbird (DSA 5118-1)
- 179185 Debian Security Update for thunderbird (DLA 2978-1)
- 184318 Debian Security Update for firefox-esrthunderbird (CVE-2022-1196)
- 198755 Ubuntu Security Notification for Thunderbird Vulnerabilities (USN-5393-1)
- 240205 Red Hat Update for firefox (RHSA-2022:1286)
- 240206 Red Hat Update for firefox (RHSA-2022:1285)
- 240207 Red Hat Update for firefox (RHSA-2022:1287)
- 240208 Red Hat Update for firefox (RHSA-2022:1284)
- 240211 Red Hat Update for thunderbird (RHSA-2022:1302)
- 240212 Red Hat Update for thunderbird (RHSA-2022:1305)
- 240214 Red Hat Update for thunderbird (RHSA-2022:1301)
- 240215 Red Hat Update for thunderbird (RHSA-2022:1326)
- 240428 Red Hat Update for firefox (RHSA-2022:1283)
- 296064 Oracle Solaris 11.4 Support Repository Update (SRU) 46.119.2 Missing (CPUAPR2022)
- 353266 Amazon Linux Security Advisory for thunderbird : ALAS2-2022-1789
- 376518 Mozilla Firefox ESR Multiple Vulnerabilities (MFSA2022-14)
- 376522 Mozilla Thunderbird Multiple Vulnerabilities (MFSA2022-15)
- 502076 Alpine Linux Security Update for firefox-esr
- 502388 Alpine Linux Security Update for thunderbird
- 710582 Gentoo Linux Mozilla Firefox Multiple Vulnerabilities (GLSA 202208-08)
- 710585 Gentoo Linux Mozilla Thunderbird Multiple Vulnerabilities (GLSA 202208-14)
- 751972 SUSE Enterprise Linux Security Update for MozillaFirefox (SUSE-SU-2022:1127-1)
- 751973 OpenSUSE Security Update for MozillaFirefox (openSUSE-SU-2022:1127-1)
- 753461 SUSE Enterprise Linux Security Update for MozillaThunderbird (SUSE-SU-2022:1176-1)
- 940476 AlmaLinux Security Update for firefox (ALSA-2022:1287)
- 940477 AlmaLinux Security Update for thunderbird (ALSA-2022:1301)
- 960590 Rocky Linux Security Update for thunderbird (RLSA-2022:1301)
- 960633 Rocky Linux Security Update for firefox (RLSA-2022:1287)
