PT-2021-6781 · Mozilla+5 · Firefox+5

Chris Peterson + 3 · Published 2021-08-10 · Updated 2024-12-12 · CVE-2021-29990

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 91

Description The issue is related to a buffer overflow in memory, allowing a remote attacker to execute arbitrary code. It is associated with memory safety bugs that showed evidence of memory corruption, which could potentially be exploited.

Recommendations For versions prior to 91, update to version 91 or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive resources until the update is applied.

Exploit

Fix

Buffer Overflow

Memory Corruption

Weakness Enumeration

CWE-119

CWE-787

Related Identifiers

ALT-PU-2021-2488

ALT-PU-2021-2725

ALT-PU-2021-2849

ALT-PU-2021-2881

ALT-PU-2021-3368

ALT-PU-2021-3369

ALT-PU-2022-1781

ALT-PU-2022-1782

BDU:2022-02173

CVE-2021-29990

OESA-2023-1673

OESA-2023-1674

OPENSUSE-SU-2021:1367-1

OPENSUSE-SU-2021:3331-1

OPENSUSE-SU-2021:3451-1

OPENSUSE-SU-2021_1367-1

OPENSUSE-SU-2021_3331-1

OPENSUSE-SU-2021_3451-1

OPENSUSE-SU-2024:10600-1

OPENSUSE-SU-2024:14572-1

SUSE-SU-2021:14821-1

SUSE-SU-2021:14826-1

SUSE-SU-2021:3191-1

SUSE-SU-2021:3331-1

SUSE-SU-2021:3451-1

SUSE-SU-2021_14821-1

SUSE-SU-2021_14826-1

SUSE-SU-2022:1577-1

SUSE-SU-2022:1582-1

SUSE-SU-2022_1577-1

SUSE-SU-2022_1582-1

USN-5037-1

USN-5037-2

Affected Products

Alt Linux

Astra Linux

Firefox

Linuxmint

Suse

Ubuntu

References · 2220

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/firefox_jit_use_after_free.rb · Exploit
• 🔥 https://github.com/mistymntncop/CVE-2022-26485 · Exploit
• 🔥 https://github.com/aleksejspopovs/cve-2020-16012 · Exploit
• 🔥 https://github.com/HassanAzze/CVE-2020-6514 · Exploit
• 🔥 https://github.com/hasan-khalil/CVE-2020-6514 · Exploit
• 🔥 https://github.com/rojhack/CVE-2020-6514 · Exploit
• 🔥 https://github.com/R0jhack/CVE-2020-6514 · Exploit
• 🔥❌ https://github.com/marcinguy/CVE-2020-15999 · Exploit, Deleted
• https://nvd.nist.gov/vuln/detail/CVE-2022-34471 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-34479 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2020-26976 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-4047 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-29990 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-38473 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-28289 · Security Note