Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2021-29980

Опубликовано: 10 авг. 2021
Источник: redhat
CVSS3: 8.8
EPSS Низкий

Описание

Uninitialized memory in a canvas object could have caused an incorrect free() leading to memory corruption and a potentially exploitable crash. This vulnerability affects Thunderbird < 78.13, Thunderbird < 91, Firefox ESR < 78.13, and Firefox < 91.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 6firefoxOut of support scope
Red Hat Enterprise Linux 6thunderbirdOut of support scope
Red Hat Enterprise Linux 7firefoxFixedRHSA-2021:315416.08.2021
Red Hat Enterprise Linux 7thunderbirdFixedRHSA-2021:316016.08.2021
Red Hat Enterprise Linux 8thunderbirdFixedRHSA-2021:315516.08.2021
Red Hat Enterprise Linux 8firefoxFixedRHSA-2021:315716.08.2021
Red Hat Enterprise Linux 8.1 Extended Update SupportfirefoxFixedRHSA-2021:315916.08.2021
Red Hat Enterprise Linux 8.1 Extended Update SupportthunderbirdFixedRHSA-2021:316116.08.2021
Red Hat Enterprise Linux 8.2 Extended Update SupportfirefoxFixedRHSA-2021:315616.08.2021
Red Hat Enterprise Linux 8.2 Extended Update SupportthunderbirdFixedRHSA-2021:316216.08.2021

Показывать по

Дополнительная информация

Статус:

Important
Дефект:
CWE-908
https://bugzilla.redhat.com/show_bug.cgi?id=1992421Mozilla: Uninitialized memory in a canvas object could have led to memory corruption

EPSS

Процентиль: 43%
0.00206
Низкий

8.8 High

CVSS3

Связанные уязвимости

CVSS3: 8.8
ubuntu
почти 4 года назад

Uninitialized memory in a canvas object could have caused an incorrect free() leading to memory corruption and a potentially exploitable crash. This vulnerability affects Thunderbird < 78.13, Thunderbird < 91, Firefox ESR < 78.13, and Firefox < 91.

CVSS3: 8.8
nvd
почти 4 года назад

Uninitialized memory in a canvas object could have caused an incorrect free() leading to memory corruption and a potentially exploitable crash. This vulnerability affects Thunderbird < 78.13, Thunderbird < 91, Firefox ESR < 78.13, and Firefox < 91.

CVSS3: 8.8
debian
почти 4 года назад

Uninitialized memory in a canvas object could have caused an incorrect ...

CVSS3: 8.8
github
около 3 лет назад

Uninitialized memory in a canvas object could have caused an incorrect free() leading to memory corruption and a potentially exploitable crash. This vulnerability affects Thunderbird < 78.13, Thunderbird < 91, Firefox ESR < 78.13, and Firefox < 91.

CVSS3: 8.8
fstec
почти 4 года назад

Уязвимость браузера Mozilla Firefox, позволяющая нарушителю выполнить произвольный код в целевой системе

EPSS

Процентиль: 43%
0.00206
Низкий

8.8 High

CVSS3