SB2022110949 - Multiple vulnerabilities in Pale Moon
Published: November 9, 2022
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 3 secuirty vulnerabilities.
1) Use-after-free (CVE-ID: CVE-2022-1097)
The vulnerability allows a remote attacker to compromise vulnerable system.
The vulnerability exists due to a use-after-free error when handling NSSToken objects. A remote attacker can create a specially crafted web page, trick the victim into visiting it, trigger a use-after-free error and execute arbitrary code on the system.
Successful exploitation of the vulnerability may allow an attacker to compromise vulnerable system.
2) Resource management error (CVE-ID: CVE-2022-28285)
The vulnerability allows a remote attacker to gain access to sensitive information.
The vulnerability exists due to usage of incorrect AliasSet when generating the assembly code for MLoadTypedArrayElementHole. A remote attacker can abuse this along with another vulnerability to perform an out-of-bounds read.
3) Security features bypass (CVE-ID: CVE-2022-28283)
The vulnerability allows a remote attacker to gain access to sensitive information.
The vulnerability exists due to missing security checks within the sourceMapURL feature in devtools. A remote attacker can trick the victim to perform certain actions and obtain contents of local files on the victim's system.
Remediation
Install update from vendor's website.