CVE-2022-46875

Reference Links

• https://bugzilla.mozilla.org/show_bug.cgi?id=1786188
• https://www.mozilla.org/en-US/security/advisories/mfsa2022-53/
• https://www.mozilla.org/en-US/security/advisories/mfsa2022-51/
• https://www.mozilla.org/en-US/security/advisories/mfsa2022-52/
• https://security.gentoo.org/glsa/202305-06
• https://security.gentoo.org/glsa/202305-13
• https://www.mozilla.org/security/advisories/mfsa2022-51/
• https://www.mozilla.org/security/advisories/mfsa2022-52/
• https://www.mozilla.org/security/advisories/mfsa2022-53/

Parent vulnerabilities

(Appears in the following advisories)

• MFSA2022-53
• MFSA2022-52
• MFSA2022-51

Peer vulnerabilities

(Found alongside the following vulnerabilities)

• CVE-2022-46880
• CVE-2022-46872
• CVE-2022-46881
• CVE-2022-46875
• CVE-2022-46882
• CVE-2022-46878
• CVE-2022-46874
• CVE-2022-46871
• CVE-2022-46873
• CVE-2022-46877
• CVE-2022-46879

Frequently Asked Questions

• What is CVE-2022-46875?

  CVE-2022-46875 is a vulnerability that allows the execution of commands on a user's computer when downloading .atloc and .ftploc files in Firefox and Thunderbird.

• Which operating systems are affected by CVE-2022-46875?

  This vulnerability only affects Mac OS operating systems.

• Which versions of Firefox and Thunderbird are affected by CVE-2022-46875?

  Firefox versions below 108 and Firefox ESR versions below 102.6 are affected. Thunderbird versions below 102.6 are also affected.

• What is the severity of CVE-2022-46875?

  The severity of CVE-2022-46875 is medium with a CVSS score of 6.5.

• How can I fix CVE-2022-46875?

  Upgrade to Firefox version 108 or higher, Firefox ESR version 102.6 or higher, or Thunderbird version 102.6 or higher to mitigate this vulnerability.