Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2022-34479

Опубликовано: 22 дек. 2022
Источник: ubuntu
Приоритет: medium
CVSS3: 6.5

Описание

A malicious website that could create a popup could have resized the popup to overlay the address bar with its own content, resulting in potential user confusion or spoofing attacks.
This bug only affects Thunderbird for Linux. Other operating systems are unaffected.. This vulnerability affects Firefox < 102, Firefox ESR < 91.11, Thunderbird < 102, and Thunderbird < 91.11.

РелизСтатусПримечание
bionic

released

102.0+build2-0ubuntu0.18.04.1
devel

not-affected

code not present
esm-infra/focal

DNE

focal

released

102.0+build2-0ubuntu0.20.04.1
impish

released

102.0+build2-0ubuntu0.21.10.1
jammy

not-affected

code not present
kinetic

not-affected

code not present
lunar

not-affected

code not present
trusty

DNE

upstream

released

102

Показывать по

РелизСтатусПримечание
bionic

released

1:91.11.0+build2-0ubuntu0.18.04.1
devel

released

1:91.11.0+build1-0ubuntu1
esm-infra-legacy/trusty

DNE

esm-infra/focal

DNE

focal

released

1:91.11.0+build2-0ubuntu0.20.04.1
impish

released

1:91.11.0+build2-0ubuntu0.21.10.1
jammy

released

1:91.11.0+build2-0ubuntu0.22.04.1
kinetic

released

1:91.11.0+build1-0ubuntu1
lunar

released

1:91.11.0+build1-0ubuntu1
trusty

ignored

end of standard support

Показывать по

6.5 Medium

CVSS3

Связанные уязвимости

CVSS3: 7.5
redhat
почти 3 года назад

A malicious website that could create a popup could have resized the popup to overlay the address bar with its own content, resulting in potential user confusion or spoofing attacks. <br>*This bug only affects Thunderbird for Linux. Other operating systems are unaffected.*. This vulnerability affects Firefox < 102, Firefox ESR < 91.11, Thunderbird < 102, and Thunderbird < 91.11.

CVSS3: 6.5
nvd
больше 2 лет назад

A malicious website that could create a popup could have resized the popup to overlay the address bar with its own content, resulting in potential user confusion or spoofing attacks. <br>*This bug only affects Thunderbird for Linux. Other operating systems are unaffected.*. This vulnerability affects Firefox < 102, Firefox ESR < 91.11, Thunderbird < 102, and Thunderbird < 91.11.

CVSS3: 6.5
debian
больше 2 лет назад

A malicious website that could create a popup could have resized the p ...

CVSS3: 6.5
github
больше 2 лет назад

A malicious website that could create a popup could have resized the popup to overlay the address bar with its own content, resulting in potential user confusion or spoofing attacks. <br>*This bug only affects Thunderbird for Linux. Other operating systems are unaffected.*. This vulnerability affects Firefox < 102, Firefox ESR < 91.11, Thunderbird < 102, and Thunderbird < 91.11.

CVSS3: 8.2
fstec
почти 3 года назад

Уязвимость почтового клиента Thunderbird, браузеров Firefox и Firefox ESR, связанная с неправильной обработкой события изменения размера всплывающего окна, позволяющая нарушителю проводить спуфинг атаки

6.5 Medium

CVSS3