btiÌåÓý

¹ØÓÚFirefox¸ßΣÎó²îµÄÇ徲ͨ¸æ

Ðû²¼Ê±¼ä£º2022-03-07 00:00:00 ×÷Õߣºadmin

Ò»¡¢¡¢Åä¾°½éÉÜ

¿ËÈÕ£¬ÊÐÎ¯ÍøÐŰìÊÖÒÕÖ§³Öµ¥Î»¼à²âµ½MozillaÐû²¼ÁËÒ»¸ö½ôÆÈÎó²îÐÞ¸´Í¨¸æ£¬ÐÞ¸´ÁËFirefoxä¯ÀÀÆ÷ÖеÄÁ½¸öÎó²î£¨CVE-2022-26485¡¢¡¢CVE-2022-26486£©¡£

1.1 Îó²îÐÎò

1¡¢¡¢CVE-2022-26485ÊÇFirefoxµÄGeckotäÖȾÒýÇæ/ÅŰæÒýÇæÖеÄÒ»¸öÎó²î¡£ÔÚFirefoxäÖÈ¾Ò³ÃæÊ±´ú£¬É¾³ýÒ»¸öXSLT²ÎÊý¿ÉÄÜ»áÔì³ÉÒ»¸ö¿É¾ÙÐÐÎó²îʹÓõÄÊͷźóÖØÒýÓÃÎó²î¡£

2¡¢¡¢CVE-2022-26486ÊÇFirefoxµÄWebGPU IPC¿ò¼ÜÖеÄÒ»¸öÊͷźóÖØÒýÓÃÎó²î¡£WebGPU IPC¿ò¼ÜÖеÄÒ»¸öÌØÊâµÄÐÂÎÅ¿ÉÄÜ»áÔì³ÉÒ»¸ö¿É¾ÙÐÐÎó²îʹÓõÄÊͷźóÖØÒýÓÃÎó²î£¬¿ÉÓÃÓÚFirefoxɳÏäµÄÌÓÒÝ¡£

¹¥»÷ÕßʹÓÃÕâÁ½¸öÎó²î¿ÉÒÔÔÚÄ¿µÄ×°±¸ÉÏʵÏÖÔ¶³Ìí§Òâ´úÂëÖ´ÐС£

1.2 Îó²î±àºÅ

CVE-2022-26485

CVE-2022-26486

1.3 Îó²îÆ·¼¶

¸ßΣ

¶þ¡¢¡¢ÐÞ¸´½¨Òé

2.1 ÊÜÓ°Ïì°æ±¾

Firefox 97.0.2

Firefox ESR 91.6.1

Firefox for Android 97.3

Focus 97.3

2.2 ÐÞ¸´½¨Òé

Mozilla¹Ù·½ÒÑÐû²¼²¹¶¡£¬½¨ÒéʹÓÃFirefoxä¯ÀÀÆ÷µÄÓû§£¬ÊµÊ±¸üÐÂÖÁÇå¾²°æ±¾¡£

¹Ù·½Í¨¸æ£º

https://www.mozilla.org/en-US/security/advisories/mfsa2022-09/


¡¾ÍøÕ¾µØÍ¼¡¿
_visitcount?siteId=156&type=3&articleId=143056