Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2021-23982

Опубликовано: 31 мар. 2021
Источник: debian

Описание

Using techniques that built on the slipstream research, a malicious webpage could have scanned both an internal network's hosts as well as services running on the user's local machine utilizing WebRTC connections. This vulnerability affects Firefox ESR < 78.9, Firefox < 87, and Thunderbird < 78.9.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
firefoxfixed87.0-1package
firefox-esrfixed78.9.0esr-1package
thunderbirdfixed1:78.9.0-1package

Примечания

  • https://www.mozilla.org/en-US/security/advisories/mfsa2021-10/#CVE-2021-23982

  • https://www.mozilla.org/en-US/security/advisories/mfsa2021-11/#CVE-2021-23982

  • https://www.mozilla.org/en-US/security/advisories/mfsa2021-12/#CVE-2021-23982

Связанные уязвимости

CVSS3: 6.5
ubuntu
почти 5 лет назад

Using techniques that built on the slipstream research, a malicious webpage could have scanned both an internal network's hosts as well as services running on the user's local machine utilizing WebRTC connections. This vulnerability affects Firefox ESR < 78.9, Firefox < 87, and Thunderbird < 78.9.

CVSS3: 6.1
redhat
почти 5 лет назад

Using techniques that built on the slipstream research, a malicious webpage could have scanned both an internal network's hosts as well as services running on the user's local machine utilizing WebRTC connections. This vulnerability affects Firefox ESR < 78.9, Firefox < 87, and Thunderbird < 78.9.

CVSS3: 6.5
nvd
почти 5 лет назад

Using techniques that built on the slipstream research, a malicious webpage could have scanned both an internal network's hosts as well as services running on the user's local machine utilizing WebRTC connections. This vulnerability affects Firefox ESR < 78.9, Firefox < 87, and Thunderbird < 78.9.

github
больше 3 лет назад

Using techniques that built on the slipstream research, a malicious webpage could have scanned both an internal network's hosts as well as services running on the user's local machine utilizing WebRTC connections. This vulnerability affects Firefox ESR < 78.9, Thunderbird < 78.9, and Firefox < 87.

suse-cvrf
почти 5 лет назад

Security update for MozillaFirefox