CVE:CVE-2022-26485
CNNVD:CNNVD-202203-501
Mozilla Firefox是美国Mozilla基金会的一款开源Web浏览器。
Mozilla Firefox 97之前版本存在资源管理错误漏洞，该漏洞源于处理XSLT参数时出现“释放后使用”错误。攻击者可利用该漏洞诱骗受害者打开精心构建的网页，在系统上执行任意代码。
solution:Upgrade mozilla firefox to a higher version than 97.0.2,97.3.0,and avoid the version (,97.0.2),(,97.3.0); Upgrade mozilla firefox_esr to a higher version than 91.6.1,and avoid the version (,91.6.1); Upgrade mozilla firefox_focus to a higher version than 97.3.0,and avoid the version (,97.3.0); Upgrade mozilla thunderbird to a higher version than 91.6.2,and avoid the version (,91.6.2)