漏洞信息详情

Mozilla Firefox 权限许可和访问控制问题漏洞

• CNNVD编号：CNNVD-202203-707
• 危害等级： 中危
  
• CVE编号： CVE-2022-26384
• 漏洞类型： 权限许可和访问控制问题
• 发布时间： 2022-03-08
• 威胁类型： 远程
• 更新时间： 2022-04-20
• 厂        商：
• 漏洞来源：

漏洞简介

Mozilla Firefox是美国Mozilla基金会的一款开源Web浏览器。

Mozilla Firefox 存在权限许可和访问控制问题漏洞，该漏洞源于处理 iframe 时的逻辑错误。 如果攻击者可以控制带有沙盒的 iframe 的内容，则该漏洞允许远程攻击者绕过已实施的安全限制。

漏洞公告

目前厂商已发布升级补丁以修复漏洞，补丁获取链接：

https://www.mozilla.org/en-US/security/advisories/mfsa2022-10/

参考网址

来源:www.cybersecurity-help.cz

链接:https://www.cybersecurity-help.cz/vdb/SB2022030914

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2022.1069

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2022.1167

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2022.1233

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2022.1023

来源:www.cybersecurity-help.cz

链接:https://www.cybersecurity-help.cz/vdb/SB2022031428

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2022.1199

来源:www.cybersecurity-help.cz

链接:https://www.cybersecurity-help.cz/vdb/SB2022030807

来源:vigilance.fr

链接:https://vigilance.fr/vulnerability/Mozilla-Firefox-Thunderbird-multiple-vulnerabilities-37743

来源:www.cybersecurity-help.cz

链接:https://www.cybersecurity-help.cz/vdb/SB2022031726

来源:vigilance.fr

链接:https://vigilance.fr/vulnerability/Mozilla-Firefox-multiple-vulnerabilities-37743

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2022.1281

来源:packetstormsecurity.com

链接:https://packetstormsecurity.com/files/166296/Red-Hat-Security-Advisory-2022-0847-01.HTML

来源:www.cybersecurity-help.cz

链接:https://www.cybersecurity-help.cz/vdb/SB2022041954

来源:www.cybersecurity-help.cz

链接:https://www.cybersecurity-help.cz/vdb/SB2022031020

来源:packetstormsecurity.com

链接:https://packetstormsecurity.com/files/166284/Ubuntu-Security-Notice-USN-5321-1.HTML

来源:packetstormsecurity.com

链接:https://packetstormsecurity.com/files/166353/Ubuntu-Security-Notice-USN-5321-2.HTML

来源:www.cybersecurity-help.cz

链接:https://www.cybersecurity-help.cz/vdb/SB2022032922

来源:www.cybersecurity-help.cz

链接:https://www.cybersecurity-help.cz/vdb/SB2022031405

来源:www.cybersecurity-help.cz

链接:https://www.cybersecurity-help.cz/vdb/SB2022032428

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2022.1119

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2022.0985

来源:www.cybersecurity-help.cz

链接:https://www.cybersecurity-help.cz/vdb/SB2022032214

受影响实体

暂无

补丁

• Mozilla Firefox 权限许可和访问控制问题漏洞的修复措施