摘要:
If an object prototype was corrupted by an attacker, they would have been able to set undesired attributes on a JavaScript object, leading to privileged code execution. This vulnerability affects Firefox < 102, Firefox ESR < 91.11, Thunderbird < 102, and Thunderbird < 91.11.
安全等级: Low
公告ID: KylinSec-SA-2025-2310
发布日期: 2025年4月20日
关联CVE: CVE-2022-2200
在JavaScript对象原型遭攻击者篡改的情况下，攻击者将能够为对象设置恶意属性，最终导致特权代码执行。该漏洞影响以下版本：
Firefox < 102
Firefox ESR < 91.11
Thunderbird < 102
Thunderbird < 91.11
| cve名称 | 产品 | 组件 | 是否受影响 |
|---|---|---|---|
| CVE-2022-2200 | KY3.4-5A | thunderbird | Unaffected |
| CVE-2022-2200 | V6 | thunderbird | Unaffected |
