Saturday, February 12, 2022

MFSA2022-05 Firefox: Security Vulnerabilities fixed in Firefox ESR 91.6 (CVE-2022-22756)

rapid7 vulnerabilities In: rapid7, vulnerabilities

Description
If a user was convinced to drag and drop an image to their desktop or other folder, the resulting object could have been changed into an executable script which would have run arbitrary code after the user clicked on it.
Solution(s)
mozilla-firefox-esr-upgrade-91_6


Referenceshttps://attackerkb.com/topics/cve-2022-22756
CVE - 2022-22756
http://www.mozilla.org/security/announce/2022/mfsa2022-05.html