USN-5370-1: Firefox vulnerabilities

Related Vulnerabilities: CVE-2022-1097   CVE-2022-24713   CVE-2022-28281   CVE-2022-28282   CVE-2022-28284   CVE-2022-28285   CVE-2022-28286   CVE-2022-28288   CVE-2022-28289   CVE-2022-28283   CVE-2022-28287  

Firefox could be made to crash or run programs as your login if it opened a malicious website.

It was discovered that selecting text caused Firefox to crash in some circumstances. An attacker could potentially exploit this to cause a denial of service. (CVE-2022-28287)

Details

Multiple security issues were discovered in Firefox. If a user were
tricked into opening a specially crafted website, an attacker could
potentially exploit these to cause a denial of service, execute script
unexpectedly, obtain sensitive information, conduct spoofing attacks,
or execute arbitrary code. (CVE-2022-1097, CVE-2022-24713, CVE-2022-28281,
CVE-2022-28282, CVE-2022-28284, CVE-2022-28285, CVE-2022-28286,
CVE-2022-28288, CVE-2022-28289)

A security issue was discovered with the sourceMapURL feature of devtools.
An attacker could potentially exploit this to include local files that
should have been inaccessible. (CVE-2022-28283)

It was discovered that selecting text caused Firefox to crash in some
circumstances. An attacker could potentially exploit this to cause a
denial of service. (CVE-2022-28287)