UBUNTU-CVE-2022-46882

Details

A use-after-free in WebGL extensions could have led to a potentially exploitable crash. This vulnerability affects Firefox < 107, Firefox ESR < 102.6, and Thunderbird < 102.6.

Affected Packages

thunderbird

Ubuntu 18.04 LTS

Fixed in:

1:102.7.1+build2-0ubuntu0.18.04.1

thunderbird

Ubuntu 20.04 LTS

Fixed in:

1:102.7.1+build2-0ubuntu0.20.04.1

thunderbird

Ubuntu 22.04 LTS

Fixed in:

1:102.7.1+build2-0ubuntu0.22.04.1

References

REPORT

https://ubuntu.com/security/CVE-2022-46882

ADVISORY

https://ubuntu.com/security/notices/USN-5824-1

REPORT

https://www.cve.org/CVERecord?id=CVE-2022-46882

REPORT

https://www.mozilla.org/en-US/security/advisories/mfsa2022-52/#CVE-2022-46882

REPORT

https://www.mozilla.org/en-US/security/advisories/mfsa2022-53/#CVE-2022-46882