- Vendor / Project
- Mozilla
- Product
- Firefox and Thunderbird
- Date added
- Mar 28, 2022
- Due date
- Apr 18, 2022
- Known ransomware use
- Unknown
- CWEs
- CWE-119
Description
Mozilla Firefox and Thunderbird do not properly handle onreadystatechange events in conjunction with page reloading, which allows remote attackers to cause a denial-of-service (DoS) or possibly execute malicious code via a crafted web site.
Required action
Apply updates per vendor instructions.