PT-2021-7342 · Mozilla+2 · Firefox For Android+2

Irvan Kurniawan · Published 2021-08-10 · Updated 2024-12-12 · CVE-2021-29983

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:C/A:N

Name of the Vulnerable Software and Affected Versions Firefox for Android versions prior to 91

Description The issue is related to errors in resource management, which can cause the browser to get stuck in fullscreen mode and not exit it even after normal interactions. This can be exploited by a remote attacker to cause a denial of service and potentially disclose protected information.

Recommendations For Firefox for Android versions prior to 91, update to version 91 or later to resolve the issue.

Fix

Weakness Enumeration

CWE-399

Related Identifiers

ALT-PU-2021-2488

ALT-PU-2021-2725

ALT-PU-2021-2849

ALT-PU-2021-2881

ALT-PU-2021-3368

ALT-PU-2022-1782

BDU:2022-05741

CVE-2021-29983

OPENSUSE-SU-2021:1367-1

OPENSUSE-SU-2021:3331-1

OPENSUSE-SU-2021:3451-1

OPENSUSE-SU-2021_1367-1

OPENSUSE-SU-2021_3331-1

OPENSUSE-SU-2021_3451-1

OPENSUSE-SU-2024:10600-1

OPENSUSE-SU-2024:14572-1

SUSE-SU-2021:14821-1

SUSE-SU-2021:14826-1

SUSE-SU-2021:3191-1

SUSE-SU-2021:3331-1

SUSE-SU-2021:3451-1

SUSE-SU-2021_14821-1

SUSE-SU-2021_14826-1

SUSE-SU-2022:1577-1

SUSE-SU-2022:1582-1

SUSE-SU-2022_1577-1

SUSE-SU-2022_1582-1

Affected Products

Alt Linux

Firefox For Android

Suse

References · 1902

• https://osv.dev/vulnerability/openSUSE-SU-2024:14572-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2021-29983 · Vendor Advisory
• https://mozilla.org/security/advisories/mfsa2021-33 · Vendor Advisory
• https://mozilla.org/en-US/security/advisories/mfsa2021-33 · Vendor Advisory
• https://bdu.fstec.ru/vul/2022-05741 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2021-29983 · Security Note
• https://bugzilla.mozilla.org/show_bug.cgi?id=1719088 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2021:14821-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2022:1577-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:10600-1 · Vendor Advisory
• https://mozilla.org/en-US/security/advisories/mfsa2021-33/#CVE-2021-29983 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2021:3331-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-29983 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2021-29983 · Security Note
• https://osv.dev/vulnerability/CVE-2021-29983 · Vendor Advisory