CVE:CVE-2022-40960
CNNVD:CNNVD-202209-1589
Mozilla Firefox是美国Mozilla基金会的一款开源Web浏览器。
Mozilla Firefox 105 之前版本存在安全漏洞，该漏洞源于对非UTF-8数据的URL解析器的并发使用不是线程安全的。这可能导致释放后重用，从而导致潜在的可利用崩溃。
solution:Upgrade mozilla firefox to a higher version than 105.0,and avoid the version (,105.0); Upgrade mozilla firefox_esr to a higher version than 102.3,and avoid the version (,102.3); Upgrade mozilla thunderbird to a higher version than 102.3,and avoid the version (,102.3)