PT-2021-3561 · Mozilla+9 · Thunderbird+9

Sehwa + 1 · Published 2021-06-09 · Updated 2024-12-12 · CVE-2021-30547

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 91.0.4472.101 Mozilla Thunderbird (affected versions not specified)

Description The issue is related to an out of bounds write, which can potentially allow a remote attacker to perform out of bounds memory access. This can be achieved via a crafted HTML page. The estimated number of potentially affected devices and details about real-world incidents are not provided.

Recommendations For Google Chrome versions prior to 91.0.4472.101, update to version 91.0.4472.101 or later to resolve the issue. For Mozilla Thunderbird, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

ALT-PU-2021-1974

ALT-PU-2021-2007

ALT-PU-2021-2068

ALT-PU-2021-2097

ALT-PU-2021-2141

ALT-PU-2021-2229

ALT-PU-2021-2233

ALT-PU-2021-2248

ALT-PU-2021-2255

ALT-PU-2021-2257

ALT-PU-2021-2261

ALT-PU-2021-2269

ALT-PU-2021-3368

ALT-PU-2022-1230

ALT-PU-2022-1782

ALT-PU-2022-2458

ALT-PU-2022-2929

ALT-PU-2022-2930

ALT-PU-2023-1138

ALT-PU-2023-1139

ALT-PU-2023-4336

ALT-PU-2023-4339

BDU:2021-03660

CESA-2021_2741

CESA-2021_2743

CESA-2021_2883

CVE-2021-30547

DLA-2709-1

DLA-2711-1

DSA-4939-1

DSA-4940-1

MGASA-2021-0354

MGASA-2021-0355

OESA-2023-1673

OESA-2023-1674

OPENSUSE-SU-2021:0881-1

OPENSUSE-SU-2021:0938-1

OPENSUSE-SU-2021:0948-1

OPENSUSE-SU-2021:0949-1

OPENSUSE-SU-2021:1066-1

OPENSUSE-SU-2021:1091-1

OPENSUSE-SU-2021:2393-1

OPENSUSE-SU-2021:2458-1

OPENSUSE-SU-2021_0881-1

OPENSUSE-SU-2021_0948-1

OPENSUSE-SU-2021_0949-1

OPENSUSE-SU-2021_1066-1

OPENSUSE-SU-2021_1091-1

OPENSUSE-SU-2021_2393-1

OPENSUSE-SU-2021_2458-1

OPENSUSE-SU-2022:0110-1

OPENSUSE-SU-2022_0110-1

OPENSUSE-SU-2024:10600-1

OPENSUSE-SU-2024:10601-1

OPENSUSE-SU-2024:10681-1

OPENSUSE-SU-2024:10977-1

OPENSUSE-SU-2024:12948-1

OPENSUSE-SU-2024:14572-1

RHSA-2021:2740

RHSA-2021:2741

RHSA-2021:2742

RHSA-2021:2743

RHSA-2021:2881

RHSA-2021:2882

RHSA-2021:2883

RHSA-2021:2914

RHSA-2021_2741

RHSA-2021_2743

RHSA-2021_2881

RHSA-2021_2883

RLSA-2021:2743

RLSA-2021:2883

SUSE-SU-2021:14766-1

SUSE-SU-2021:2389-1

SUSE-SU-2021:2393-1

SUSE-SU-2021:2458-1

SUSE-SU-2021:2478-1

SUSE-SU-2021_14766-1

USN-5011-1

USN-5058-1

Affected Products

Alt Linux

Astra Linux

Centos

Google Chrome

Linuxmint

Thunderbird

Red Hat

Rocky Linux

Suse

Ubuntu

References · 4677

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/firefox_jit_use_after_free.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/chrome_cve_2021_21220_v8_insufficient_validation.rb · Exploit
• 🔥 https://github.com/mistymntncop/CVE-2022-1802 · Exploit
• 🔥 https://github.com/ZeusBox/CVE-2021-37980 · Exploit
• 🔥 https://github.com/Phuong39/PoC-CVE-2021-30632 · Exploit
• 🔥 https://github.com/0vercl0k/CVE-2022-28281 · Exploit
• 🔥 https://github.com/SpiralBL0CK/Chrome-V8-RCE-CVE-2021-38003 · Exploit
• 🔥 https://github.com/CrackerCat/CVE-2021-30632 · Exploit
• 🔥 https://github.com/Peterpan0927/TFC-Chrome-v8-bug-CVE-2021-38001-poc · Exploit
• 🔥 https://github.com/xmzyshypnc/CVE-2021-30551 · Exploit
• 🔥 https://github.com/mistymntncop/CVE-2022-26485 · Exploit
• 🔥 https://github.com/security-dbg/CVE-2021-21220 · Exploit
• 🔥 https://github.com/aleksejspopovs/cve-2020-16012 · Exploit
• 🔥 https://github.com/maldiohead/TFC-Chrome-v8-bug-CVE-2021-38001-poc · Exploit
• 🔥 https://github.com/R0jhack/CVE-2020-6514 · Exploit