CVE:CVE-2022-46875
CNNVD:CNNVD-202212-3063
Mozilla Firefox是美国Mozilla基金会的一款开源Web浏览器。
Mozilla Firefox存在安全漏洞，该漏洞源于下载 .atloc 和 .ftploc 文件时未出现可执行文件警告，这些文件可以在用户计算机上运行命令。
solution:Upgrade mozilla firefox to a higher version than 108.0,and avoid the version (,108.0); Upgrade mozilla firefox_esr to a higher version than 102.6,and avoid the version (,102.6); Upgrade mozilla thunderbird to a higher version than 102.6,and avoid the version (,102.6)