PT-2021-2598 · Mozilla+4 · Firefox+4

Chiaki Ishikawa

·

Published

2021-01-26

·

Updated

2024-12-12

·

CVE-2021-23962

CVSS v2.0

10

High

VectorAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 85
Description The issue is related to the incorrect use of the 'RowCountChanged' method, potentially leading to a user-after-poison and a crash. This could allow a remote attacker to elevate privileges or cause a denial of service. The vulnerability is associated with a buffer overflow in memory.
Recommendations For versions prior to 85, update to version 85 or later to resolve the issue. As a temporary workaround, consider restricting access to the RowCountChanged method until a patch is available.

Exploit

Fix

Buffer Overflow

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-119

Related Identifiers

ALT-PU-2021-1162
ALT-PU-2021-2725
ALT-PU-2021-2881
ALT-PU-2021-3368
ALT-PU-2021-3369
ALT-PU-2022-1781
ALT-PU-2022-1782
BDU:2021-02081
CVE-2021-23962
OESA-2023-1673
OESA-2023-1674
OPENSUSE-SU-2024:10600-1
OPENSUSE-SU-2024:14572-1
USN-4717-1
USN-4717-2

Affected Products

Alt Linux
Astra Linux
Linuxmint
Firefox
Ubuntu