CVE:CVE-2022-36314
CNNVD:CNNVD-202207-2441
Mozilla Firefox是美国Mozilla基金会的一款开源Web浏览器。
Mozilla Firefox 100.0 到 102.0.1版本、Mozilla ESR 102.0 到 102.0.1版本存在安全漏洞，该漏洞源于在系统上打开 .lnk 快捷方式时出现错误，如果快捷方式包含指向外部资源的链接，则浏览器可以从操作系统发起网络请求。
solution:Upgrade mozilla firefox to a higher version than 103.0,and avoid the version (,103.0); Upgrade mozilla firefox_esr to a higher version than 102.1,and avoid the version (,102.1); Upgrade mozilla thunderbird to a higher version than 102.1,and avoid the version (,102.1)