CVE:CVE-2022-38473
CNNVD:CNNVD-202208-3780
Mozilla Thunderbird是美国Mozilla基金会的一套从Mozilla Application Suite独立出来的电子邮件客户端软件。该软件支持IMAP、POP邮件协议以及HTML邮件格式。
Mozilla Firefox 104 之前版本存在安全漏洞，该漏洞源于跨域iframe引用XSLT文档继承父域权限（例如麦克风或摄像头访问）。
solution:Upgrade mozilla firefox to a higher version than 104.0,and avoid the version (,104.0); Upgrade mozilla firefox_esr to a higher version than 91.13,102.2,and avoid the version (,91.13),[102.0,102.2); Upgrade mozilla thunderbird to a higher version than 91.13,102.2,and avoid the version (,91.13),[102.0,102.2)