CVE-2022-4291 — Aswjsflt.dll in Avast Antivirus windows caused a crash of the Mozilla Firefox browser due to heap corruption

CVE-2022-4291

Aswjsflt.dll in Avast Antivirus windows caused a crash of the Mozilla Firefox browser due to heap corruption PUBLISHED

Description (CNA)

The aswjsflt.dll library from Avast Antivirus windows contained a potentially exploitable heap corruption vulnerability that could enable an attacker to bypass the sandbox of the application it was loaded into, if applicable. This issue was fixed in version 18.0.1478 of the Script Shield Component.

Affected (CNA)

Vendor / product	Versions
NortonLifelock / Avast Antivirus	affected 0 through 18.0.1473.0

CWE

CWE-119

References

https://support.norton.com/sp/static/external/tools/security-advisories.html

ADP enrichment

CVE

No English description supplied.

https://support.norton.com/sp/static/external/tools/security-advisories.html

CISA-ADP

No English description supplied.

No references supplied.