CVE-2021-23962

Опубликовано: 26 фев. 2021

Источник: debian

Описание

Incorrect use of the '<RowCountChanged>' method could have led to a user-after-poison and a potentially exploitable crash. This vulnerability affects Firefox < 85.

Пакеты

Пакет	Статус	Версия исправления	Релиз	Тип
firefox	fixed	85.0-1		package

Примечания

https://www.mozilla.org/en-US/security/advisories/mfsa2021-03/#CVE-2021-23962

Связанные уязвимости

CVE-2021-23962

CVSS3: 8.8

ubuntu

почти 5 лет назад

Incorrect use of the '<RowCountChanged>' method could have led to a user-after-poison and a potentially exploitable crash. This vulnerability affects Firefox < 85.

CVE-2021-23962

CVSS3: 8.8

nvd

почти 5 лет назад

Incorrect use of the '<RowCountChanged>' method could have led to a user-after-poison and a potentially exploitable crash. This vulnerability affects Firefox < 85.

GHSA-cgj5-m6v7-hf6x

github

больше 3 лет назад

Incorrect use of the '<RowCountChanged>' method could have led to a user-after-poison and a potentially exploitable crash. This vulnerability affects Firefox < 85.

BDU:2021-02081

CVSS3: 8.8

fstec

около 5 лет назад

Уязвимость метода <RowCountChanged> браузера Mozilla Firefox, позволяющая нарушителю повысить свои привилегии или вызвать отказ в обслуживании