Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2021-23995

Опубликовано: 24 июн. 2021
Источник: debian
EPSS Низкий

Описание

When Responsive Design Mode was enabled, it used references to objects that were previously freed. We presume that with enough effort this could have been exploited to run arbitrary code. This vulnerability affects Firefox ESR < 78.10, Thunderbird < 78.10, and Firefox < 88.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
firefoxfixed88.0-1package
firefox-esrfixed78.10.0esr-1package
thunderbirdfixed1:78.10.0-1package

Примечания

  • https://www.mozilla.org/en-US/security/advisories/mfsa2021-14/#CVE-2021-23995

  • https://www.mozilla.org/en-US/security/advisories/mfsa2021-15/#CVE-2021-23995

  • https://www.mozilla.org/en-US/security/advisories/mfsa2021-16/#CVE-2021-23995

EPSS

Процентиль: 76%
0.01023
Низкий

Связанные уязвимости

CVSS3: 8.8
ubuntu
около 4 лет назад

When Responsive Design Mode was enabled, it used references to objects that were previously freed. We presume that with enough effort this could have been exploited to run arbitrary code. This vulnerability affects Firefox ESR < 78.10, Thunderbird < 78.10, and Firefox < 88.

CVSS3: 8.8
redhat
больше 4 лет назад

When Responsive Design Mode was enabled, it used references to objects that were previously freed. We presume that with enough effort this could have been exploited to run arbitrary code. This vulnerability affects Firefox ESR < 78.10, Thunderbird < 78.10, and Firefox < 88.

CVSS3: 8.8
nvd
около 4 лет назад

When Responsive Design Mode was enabled, it used references to objects that were previously freed. We presume that with enough effort this could have been exploited to run arbitrary code. This vulnerability affects Firefox ESR < 78.10, Thunderbird < 78.10, and Firefox < 88.

github
около 3 лет назад

When Responsive Design Mode was enabled, it used references to objects that were previously freed. We presume that with enough effort this could have been exploited to run arbitrary code. This vulnerability affects Firefox ESR < 78.10, Thunderbird < 78.10, and Firefox < 88.

CVSS3: 8.8
fstec
больше 4 лет назад

Уязвимость режима адаптивного дизайна (Responsive Design Mode) почтового клиента Thunderbird, браузеров Firefox и Firefox ESR, позволяющая нарушителю выполнить произвольный код

EPSS

Процентиль: 76%
0.01023
Низкий