SB2022110948 - Multiple vulnerabilities in Pale Moon

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB2022110948

SB2022110948 - Multiple vulnerabilities in Pale Moon

Published: November 9, 2022 Updated: January 31, 2023

Security Bulletin ID SB2022110948
Severity
Critical
Patch available
YES
Number of vulnerabilities 4
Exploitation vector Remote access
Highest impact Code execution

Breakdown by Severity

Critical 25% Medium 75%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 4 secuirty vulnerabilities.


1) Information disclosure (CVE-ID: CVE-2022-22760)

The vulnerability allows a remote attacker to gain access to potentially sensitive information.

The vulnerability exists due to the way Firefox displays error messages in cross-origin responses, when importing resources using Web Workers. A remote attacker can distinguish the difference between application/javascript responses and non-script responses and learn information cross-origin.


2) Sandbox restrictions bypass (CVE-ID: CVE-2022-22759)

The vulnerability allows a remote attacker to bypass implemented security restrictions.

The vulnerability exists due to the way iframes are handled by the browser. If a document created a sandboxed iframe without allow-scripts, and subsequently appended an element to the iframe's document that e.g. had a JavaScript event handler - the event handler would have run despite the iframe's sandbox.


3) Insufficient UI Warning of Dangerous Operations (CVE-ID: CVE-2022-22756)

The vulnerability allows a remote attacker execute arbitrary code.

The vulnerability exists due to browser fails to properly identify a malicious file during drag and drop operations. A remote attacker can trick the victim to drag and drop an image to their desktop or other folder and change the resulting object into an executable script which will be executed after the user clicked on it.


4) Use-after-free (CVE-ID: CVE-2022-26485)

The vulnerability allows a remote attacker to compromise vulnerable system.

The vulnerability exists due to a use-after-free error when processing XSLT parameter. A remote attacker can trick the victim to open a specially crafted web page, trigger a use-after-free error and execute arbitrary code on the system.

Successful exploitation of the vulnerability may allow an attacker to compromise vulnerable system.

Note, the vulnerability is being actively exploited in the wild.


Remediation

Install update from vendor's website.

References