March 22, 2024
Severity High Analysis Summary Ducktail Malware is a malicious program designed by hackers to infiltrate computers and networks globally. Ducktail malware is typically delivered through a […]
Rewterz Threat Alert – APT SideWinder Group – Active IOCs
March 10, 2022
Rewterz Threat Alert – DanaBot Trojan – Active IOCs
March 10, 2022
Rewterz Threat Alert – APT SideWinder Group – Active IOCs
March 10, 2022
Rewterz Threat Alert – DanaBot Trojan – Active IOCs
March 10, 2022
Severity
Medium
Analysis Summary
CVE-2022-26382
Mozilla Firefox could allow a remote attacker to obtain sensitive information, caused by side-channel attacks on the text. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to exfiltrate Autofill tooltips and obtain sensitive information.
CVE-2022-0843
Mozilla Firefox could allow a remote attacker to execute arbitrary code on the system, caused by memory safety bugs within the browser engine. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability using unknown attack vectors to execute arbitrary code on the vulnerable system or cause a denial of service.
CVE-2022-26385
Mozilla Firefox is vulnerable to a denial of service, caused by a use-after-free in thread shutdown. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to cause the browser to crash.
CVE-2022-26386
Mozilla Firefox could allow a remote attacker to obtain sensitive information, caused by the downloading of temporary files to /tmp and accessible by other local users. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to obtain sensitive information.
CVE-2022-26381
Mozilla Firefox is vulnerable to a denial of service, caused by a use-after-free in text reflows. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to cause the browser to crash.
CVE-2022-26384
Mozilla Firefox could allow a remote attacker to bypass security restrictions, caused by an error when controlling the contents of an iframe sandboxed with allow-popups but not allow-scripts. By persuading a victim to click a specially-crafted link, a remote attacker could exploit this vulnerability to bypass sandbox restrictions.
CVE-2022-26383
Mozilla Firefox could allow a remote attacker to conduct spoofing attacks, caused by an error when using fullscreen mode. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the browser window.
Impact
- Information Disclosure
- Code Execution
- Denial of Service
- Security Bypass
- Unauthorized Access
Indicators of Compromise
CVE
- CVE-2022-26382
- CVE-2022-0843
- CVE-2022-26385
- CVE-2022-26386
- CVE-2022-26381
- CVE-2022-26384
- CVE-2022-26383
Affected Vendors
Mozilla
Affected Products
- Mozilla Firefox 97.0.1
- Mozilla Firefox ESR 91.6
Remediation
Refer to Mozilla Foundation Security Advisory for patch, upgrade, or suggested workaround information.