CVE:CVE-2022-2505
CNNVD:CNNVD-202207-2439
Mozilla Firefox是美国Mozilla基金会的一款开源Web浏览器。
Mozilla Firefox存在缓冲区错误漏洞，该漏洞源于在处理 HTML 内容时出现边界错误。远程攻击者利用该漏洞创建特制网页，诱骗受害者打开它，从而触发内存损坏并在目标系统上执行任意代码。
solution:Upgrade mozilla firefox to a higher version than 103.0,and avoid the version (,103.0); Upgrade mozilla firefox_esr to a higher version than 102.1,and avoid the version (,102.1); Upgrade mozilla thunderbird to a higher version than 102.1,and avoid the version (,102.1)