CVE-2022-42929 — Uncontrolled Resource Consumption in Mozilla Firefox

CWE-400 — Uncontrolled Resource Consumption15 documents8 sources
Severity
6.5MEDIUMNVD
OSV8.1OSV5.5
EPSS
0.2%
top 55.40%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Mozilla FirefoxMozilla Firefox ESRMozilla Thunderbird
Timeline
PublishedDec 22

Description

If a website called `window.print()` in a particular way, it could cause a denial of service of the browser, which may persist beyond browser restart depending on the user's session restore settings. This vulnerability affects Firefox < 106, Firefox ESR < 102.4, and Thunderbird < 102.4.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:HExploitability: 2.8 | Impact: 3.6

Affected Packages9 packages

▶CVEListV5mozilla/firefoxunspecified — 106
▶NVDmozilla/firefox< 106.0
▶CVEListV5mozilla/firefox_esrunspecified — 102.4
▶NVDmozilla/firefox_esr< 102.4
▶Ubuntumozilla/firefox< 106.0.2+build1-0ubuntu0.18.04.1+3

🔴Vulnerability Details

6
CVEList
CVE-2022-42929: If a website called `window↗2022-12-22
▶
OSV
CVE-2022-42929: If a website called `window↗2022-12-22
▶
GHSA
GHSA-6j29-45pf-r9wm: If a website called window↗2022-12-22
▶
OSV
thunderbird vulnerabilities↗2022-11-11
▶
OSV
firefox vulnerabilities↗2022-11-10
▶

📋Vendor Advisories

8
Ubuntu
Thunderbird vulnerabilities↗2022-11-11
▶
Ubuntu
Firefox vulnerabilities↗2022-11-10
▶
Ubuntu
Firefox vulnerabilities↗2022-11-01
▶
Red Hat
Mozilla: Denial of Service via window.print↗2022-10-18
▶
Debian
CVE-2022-42929: firefox - If a website called `window.print()` in a particular way, it could cause a denia...↗2022
▶
CVE-2022-42929 — Uncontrolled Resource Consumption | cvebase