PT-2021-4400 · Mozilla+8 · Thunderbird+9

Andreas Pehrson + 1 · Published 2021-10-05 · Updated 2024-12-12 · CVE-2021-38500

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 93 Firefox ESR versions prior to 91.2 Thunderbird versions prior to 78.15 Thunderbird versions prior to 91.2

Description The issue is related to memory safety bugs present in Firefox, which can lead to memory corruption. With sufficient effort, these bugs could be exploited to run arbitrary code. This allows a remote attacker to execute code in the system.

Recommendations For Firefox versions prior to 93, update to version 93 or later. For Firefox ESR versions prior to 91.2, update to version 91.2 or later. For Thunderbird versions prior to 78.15, update to version 78.15 or later. For Thunderbird versions prior to 91.2, update to version 91.2 or later.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

ALT-PU-2021-2981

ALT-PU-2021-2992

ALT-PU-2021-2995

ALT-PU-2021-3003

ALT-PU-2021-3004

ALT-PU-2021-3005

ALT-PU-2021-3026

ALT-PU-2021-3069

ALT-PU-2021-3097

ALT-PU-2021-3118

ALT-PU-2021-3368

ALT-PU-2021-3370

ALT-PU-2022-1782

ALT-PU-2022-1783

ALT-PU-2022-2458

ALT-PU-2022-2929

ALT-PU-2023-1138

ALT-PU-2023-4336

BDU:2021-05030

CESA-2021_3755

CESA-2021_3791

CESA-2021_3838

CESA-2021_3841

CVE-2021-38500

DLA-2782-1

DLA-2874-1

DSA-4981-1

DSA-5034-1

MGASA-2021-0469

MGASA-2021-0478

OESA-2023-1673

OESA-2023-1674

OPENSUSE-SU-2021:1367-1

OPENSUSE-SU-2021:1635-1

OPENSUSE-SU-2021:3331-1

OPENSUSE-SU-2021:3451-1

OPENSUSE-SU-2021:4150-1

OPENSUSE-SU-2021_1367-1

OPENSUSE-SU-2021_1635-1

OPENSUSE-SU-2021_3331-1

OPENSUSE-SU-2021_3451-1

OPENSUSE-SU-2021_4150-1

OPENSUSE-SU-2024:11570-1

OPENSUSE-SU-2024:11571-1

OPENSUSE-SU-2024:14572-1

RHSA-2021:3755

RHSA-2021:3756

RHSA-2021:3757

RHSA-2021:3791

RHSA-2021:3838

RHSA-2021:3839

RHSA-2021:3840

RHSA-2021:3841

RHSA-2021_3755

RHSA-2021_3791

RHSA-2021_3838

RHSA-2021_3841

RLSA-2021:3755

RLSA-2021:3838

SUSE-SU-2021:14826-1

SUSE-SU-2021:3331-1

SUSE-SU-2021:3446-1

SUSE-SU-2021:3451-1

SUSE-SU-2021:4150-1

SUSE-SU-2021_14826-1

USN-5107-1

USN-5132-1

USN-5248-1

Affected Products

Alt Linux

Astra Linux

Centos

Firefox

Linuxmint

Red Hat

Rocky Linux

Suse

Thunderbird

Ubuntu

References · 2314

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/firefox_jit_use_after_free.rb · Exploit
• 🔥 https://github.com/mistymntncop/CVE-2022-1802 · Exploit
• 🔥 https://github.com/0vercl0k/CVE-2022-28281 · Exploit
• 🔥 https://github.com/mistymntncop/CVE-2022-26485 · Exploit
• 🔥 https://github.com/aleksejspopovs/cve-2020-16012 · Exploit
• 🔥 https://github.com/HassanAzze/CVE-2020-6514 · Exploit
• 🔥 https://github.com/hasan-khalil/CVE-2020-6514 · Exploit
• 🔥 https://github.com/rojhack/CVE-2020-6514 · Exploit
• 🔥 https://github.com/R0jhack/CVE-2020-6514 · Exploit
• 🔥❌ https://github.com/marcinguy/CVE-2020-15999 · Exploit, Deleted
• 🔥❌ https://github.com/Pwnrin/CVE-2022-28282 · Exploit, Deleted
• 🔥❌ https://github.com/MagicPwnrin/CVE-2022-28282 · Exploit, Deleted
• https://nvd.nist.gov/vuln/detail/CVE-2022-34471 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-34479 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2020-26976 · Security Note