CVE-2021-43546

Опубликовано: 07 дек. 2021

Источник: redhat

CVSS3: 5.4

EPSS Низкий

Описание

It was possible to recreate previous cursor spoofing attacks against users with a zoomed native cursor. This vulnerability affects Thunderbird < 91.4.0, Firefox ESR < 91.4.0, and Firefox < 95.

Затронутые пакеты

Платформа	Пакет	Состояние	Рекомендация	Релиз
Red Hat Enterprise Linux 6	firefox	Out of support scope
Red Hat Enterprise Linux 6	thunderbird	Out of support scope
Red Hat Enterprise Linux 7	firefox	Fixed	RHSA-2021:5014	08.12.2021
Red Hat Enterprise Linux 7	thunderbird	Fixed	RHSA-2021:5046	09.12.2021
Red Hat Enterprise Linux 8	firefox	Fixed	RHSA-2021:5013	08.12.2021
Red Hat Enterprise Linux 8	thunderbird	Fixed	RHSA-2021:5045	09.12.2021
Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions	firefox	Fixed	RHSA-2021:5017	08.12.2021
Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions	thunderbird	Fixed	RHSA-2021:5055	09.12.2021
Red Hat Enterprise Linux 8.2 Extended Update Support	firefox	Fixed	RHSA-2021:5016	08.12.2021
Red Hat Enterprise Linux 8.2 Extended Update Support	thunderbird	Fixed	RHSA-2021:5047	09.12.2021

Показывать по

Ссылки на источники

Дополнительная информация

Статус:

Low

Дефект:

CWE-1021

https://bugzilla.redhat.com/show_bug.cgi?id=2030115Mozilla: Cursor spoofing could overlay user interface when native cursor is zoomed

EPSS

Процентиль: 58%

0.00371

Низкий

5.4 Medium

CVSS3

Связанные уязвимости

CVE-2021-43546

CVSS3: 4.3

ubuntu

около 4 лет назад

It was possible to recreate previous cursor spoofing attacks against users with a zoomed native cursor. This vulnerability affects Thunderbird < 91.4.0, Firefox ESR < 91.4.0, and Firefox < 95.

CVE-2021-43546

CVSS3: 4.3

nvd

около 4 лет назад

It was possible to recreate previous cursor spoofing attacks against users with a zoomed native cursor. This vulnerability affects Thunderbird < 91.4.0, Firefox ESR < 91.4.0, and Firefox < 95.

CVE-2021-43546

CVSS3: 4.3

debian

около 4 лет назад

It was possible to recreate previous cursor spoofing attacks against u ...

GHSA-6fv3-g7rx-8q2q

CVSS3: 4.3

github

около 4 лет назад

It was possible to recreate previous cursor spoofing attacks against users with a zoomed native cursor. This vulnerability affects Thunderbird < 91.4.0, Firefox ESR < 91.4.0, and Firefox < 95.

BDU:2021-06181

CVSS3: 3.1

fstec

около 4 лет назад

Уязвимость браузера Mozilla Firefox и почтового клиента Mozilla Thunderbird, связанная с ошибками криптографических преобразований, позволяющая нарушителю проводить спуфинг-атаки

EPSS

Процентиль: 58%

0.00371

Низкий

5.4 Medium

CVSS3