PT-2021-2990 · Mozilla+4 · Firefox+4

Mozilla Developers And Community

·

Published

2021-04-19

·

Updated

2024-12-12

·

CVE-2021-29947

CVSS v2.0

10

High

VectorAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Firefox versions prior to 88
Description The issue is related to memory safety bugs, including evidence of memory corruption, which could potentially be exploited to run arbitrary code. The vulnerability is associated with a buffer overflow operation in memory, allowing a remote attacker to cause memory damage and execute arbitrary code on the target system.
Recommendations For versions prior to 88, update to version 88 or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive features or modules in Firefox until the update is applied.

Exploit

Fix

Buffer Overflow

Memory Corruption

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-119CWE-787

Related Identifiers

ALT-PU-2021-1676
ALT-PU-2021-2725
ALT-PU-2021-2881
ALT-PU-2021-3368
ALT-PU-2021-3369
ALT-PU-2022-1781
ALT-PU-2022-1782
BDU:2021-02580
CVE-2021-29947
OESA-2023-1673
OESA-2023-1674
OPENSUSE-SU-2024:10600-1
OPENSUSE-SU-2024:14572-1
USN-4926-1

Affected Products

Alt Linux
Astra Linux
Firefox
Linuxmint
Ubuntu