The vulnerability of the Responsive Design Mode in the Thunderbird email client, as well as in the Firefox and Firefox ESR browsers, allows a hacker to execute arbitrary code.

🗓️ 05 May 2021 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 6 Views

A use-after-free in Responsive Design Mode in Thunderbird and Firefox allows remote code execution.

Reporter	Title	Published	Views	Family All 191
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities of Mozilla Firefox (less than Firefox 78.14.0 ESR + CVE-2021-29967) have affected Synthetic Playback Agent 8.1.4.0-8.1.4 IF14	28 Sep 202116:45	–	ibm
ALT Linux	Security fix for the ALT Linux 10 package firefox-esr version 78.10.0-alt1	21 Apr 202100:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 10 package thunderbird version 78.10.0-alt1	26 Apr 202100:00	–	altlinux
ATTACKERKB	CVE-2021-23995	24 Jun 202114:15	–	attackerkb
Tenable Nessus	Amazon Linux 2 : thunderbird (ALAS-2021-1644)	24 May 202100:00	–	nessus
Tenable Nessus	CentOS 8 : thunderbird (CESA-2021:1353)	27 Apr 202100:00	–	nessus
Tenable Nessus	CentOS 8 : firefox (CESA-2021:1360)	3 May 202100:00	–	nessus
Tenable Nessus	CentOS 7 : thunderbird (RHSA-2021:1350)	9 Oct 202400:00	–	nessus
Tenable Nessus	CentOS 7 : firefox (RHSA-2021:1363)	9 Oct 202400:00	–	nessus
Tenable Nessus	Debian DLA-2632-1 : thunderbird security update	23 Apr 202100:00	–	nessus

Vulners

Node

OR

novell suse_openstack_cloudMatch8

novell suse_enterprise_storageMatch6

novell hpe_helion_openstackMatch8

novell suse_openstack_cloudMatch9

novell suse_linux_enterprise_high_performance_computingMatch15-espos

novell suse_linux_enterprise_high_performance_computingMatch15-ltss

novell suse_caas_platformMatch4.0

novell suse_manager_proxyMatch4.0

novell suse_manager_retail_branch_serverMatch4.0

novell suse_manager_serverMatch4.0

mozilla thunderbirdRange<78.10

mozilla firefoxRange<88

mozilla firefox_esrRange<78.10

red_hat red_hat_enterprise_linuxMatch7

red_hat red_hat_enterprise_linuxMatch8

novell suse_linux_enterprise_server_for_sap_applicationsMatch15

novell suse_linux_enterprise_serverMatch15-ltss

canonical ubuntuMatch20.10

novell opensuse_leapMatch15.2

canonical ubuntuMatch21.04

Source	Link
access	www.access.redhat.com/security/cve/CVE-2021-23995
redos	www.redos.red-soft.ru/updatesec/
security-tracker	www.security-tracker.debian.org/tracker/CVE-2021-23995
strelets	www.strelets.net/patchi-i-obnovleniya-bezopasnosti
ubuntu	www.ubuntu.com/security/notices/USN-4926-1
cybersecurity-help	www.cybersecurity-help.cz/vdb/SB2021042934
mozilla	www.mozilla.org/en-US/security/advisories/mfsa2021-14/
mozilla	www.mozilla.org/en-US/security/advisories/mfsa2021-15/
mozilla	www.mozilla.org/en-US/security/advisories/mfsa2021-16/
suse	www.suse.com/security/cve/CVE-2021-23995/

24 Sep 2024 00:00Current

7.4High risk

Vulners AI Score7.4

CVSS 38.8

CVSS 210

EPSS0.01214

responsive design mode thunderbird firefox browser memory after free remote code execution