PT-2021-4463 · Mozilla+8 · Firefox Esr+10

Christian Holler + 2 · Published 2021-10-05 · Updated 2024-12-12 · CVE-2021-38501

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 93 Firefox ESR versions prior to 91.2 Thunderbird versions prior to 91.2

Description The issue is caused by memory safety bugs, including evidence of memory corruption, which could potentially be exploited to run arbitrary code with enough effort. It is also described as a buffer overflow vulnerability that may allow a remote attacker to execute arbitrary code.

Recommendations For Firefox versions prior to 93, update to version 93 or later. For Firefox ESR versions prior to 91.2, update to version 91.2 or later. For Thunderbird versions prior to 91.2, update to version 91.2 or later.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

ALT-PU-2021-2981

ALT-PU-2021-2992

ALT-PU-2021-3004

ALT-PU-2021-3005

ALT-PU-2021-3026

ALT-PU-2021-3069

ALT-PU-2021-3097

ALT-PU-2021-3118

ALT-PU-2021-3368

ALT-PU-2021-3370

ALT-PU-2022-1782

ALT-PU-2022-1783

ALT-PU-2022-2458

ALT-PU-2022-2929

ALT-PU-2023-1138

ALT-PU-2023-4336

BDU:2021-05096

CESA-2021_3755

CESA-2021_3791

CESA-2021_3838

CESA-2021_3841

CVE-2021-38501

MGASA-2021-0469

MGASA-2021-0478

OESA-2023-1673

OESA-2023-1674

OPENSUSE-SU-2021:1367-1

OPENSUSE-SU-2021:1635-1

OPENSUSE-SU-2021:3331-1

OPENSUSE-SU-2021:3451-1

OPENSUSE-SU-2021:4150-1

OPENSUSE-SU-2021_1367-1

OPENSUSE-SU-2021_1635-1

OPENSUSE-SU-2021_3331-1

OPENSUSE-SU-2021_3451-1

OPENSUSE-SU-2021_4150-1

OPENSUSE-SU-2024:11570-1

OPENSUSE-SU-2024:11571-1

OPENSUSE-SU-2024:14572-1

RHSA-2021:3755

RHSA-2021:3756

RHSA-2021:3757

RHSA-2021:3791

RHSA-2021:3838

RHSA-2021:3839

RHSA-2021:3840

RHSA-2021:3841

RHSA-2021_3755

RHSA-2021_3791

RHSA-2021_3838

RHSA-2021_3841

RLSA-2021:3755

RLSA-2021:3838

SUSE-SU-2021:14826-1

SUSE-SU-2021:3331-1

SUSE-SU-2021:3446-1

SUSE-SU-2021:3451-1

SUSE-SU-2021:4150-1

SUSE-SU-2021_14826-1

USN-5107-1

USN-5132-1

USN-5248-1

Affected Products

Alt Linux

Astra Linux

Centos

Firefox

Firefox Esr

Linuxmint

Red Hat

Rocky Linux

Suse

Thunderbird

Ubuntu

References · 2300

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/firefox_jit_use_after_free.rb · Exploit
• 🔥 https://github.com/mistymntncop/CVE-2022-1802 · Exploit
• 🔥 https://github.com/0vercl0k/CVE-2022-28281 · Exploit
• 🔥 https://github.com/mistymntncop/CVE-2022-26485 · Exploit
• 🔥 https://github.com/aleksejspopovs/cve-2020-16012 · Exploit
• 🔥 https://github.com/HassanAzze/CVE-2020-6514 · Exploit
• 🔥 https://github.com/hasan-khalil/CVE-2020-6514 · Exploit
• 🔥 https://github.com/rojhack/CVE-2020-6514 · Exploit
• 🔥 https://github.com/R0jhack/CVE-2020-6514 · Exploit
• 🔥❌ https://github.com/marcinguy/CVE-2020-15999 · Exploit, Deleted
• 🔥❌ https://github.com/Pwnrin/CVE-2022-28282 · Exploit, Deleted
• 🔥❌ https://github.com/MagicPwnrin/CVE-2022-28282 · Exploit, Deleted
• https://nvd.nist.gov/vuln/detail/CVE-2022-34471 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-34479 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2020-26976 · Security Note