The vulnerability of Web Render components in the Firefox web browser allows a hacker to execute arbitrary code within the system.

🗓️ 12 May 2021 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 8 Views

Firefox Web Render vulnerability from shared resource synchronization errors enables code execution.

Reporter	Title	Published	Views	Family All 53
ATTACKERKB	CVE-2021-29952	24 Jun 202114:15	–	attackerkb
AlpineLinux	CVE-2021-29952	24 Jun 202113:18	–	alpinelinux
ArchLinux	[ASA-202105-5] firefox: arbitrary code execution	19 May 202100:00	–	archlinux
AstraLinux	Astra Linux – Vulnerability in Firefox	20 May 202605:53	–	astralinux
CNNVD	Mozilla Firefox 竞争条件问题漏洞	5 May 202100:00	–	cnnvd
CNVD	Mozilla Firefox Competitive Conditions Issue Vulnerability	7 May 202100:00	–	cnvd
CVE	CVE-2021-29952	24 Jun 202113:18	–	cve
Cvelist	CVE-2021-29952	24 Jun 202113:18	–	cvelist
Debian CVE	CVE-2021-29952	24 Jun 202113:18	–	debiancve
EUVD	EUVD-2021-16411	7 Oct 202500:30	–	euvd

Vulners

Node

OR

mozilla firefoxRange<88.0.1

mozilla firefoxRange<88.1.3

canonical ubuntuMatch20.10

canonical ubuntuMatch21.04

Source	Link
mozilla	www.mozilla.org/en-US/security/advisories/mfsa2021-20/
redos	www.redos.red-soft.ru/updatesec
ubuntu	www.ubuntu.com/security/notices/USN-4942-1
cybersecurity-help	www.cybersecurity-help.cz/vdb/SB2021050517
opennet	www.opennet.ru/opennews/art.shtml
xn--80ahaefyxhn	www.xn--80ahaefyxhn.xn--j1afgaq.xn--p1ai/bin/view/%D0%9E%D0%A1%D0%BD%D0%BE%D0%B2%D0%B0/%D0%9E%D0%B1%D0%BD%D0%BE%D0%B2%D0%BB%D0%B5%D0%BD%D0%B8%D1%8F/2.4.2/
strelets	www.strelets.net/patchi-i-obnovleniya-bezopasnosti
xn--80ahaefyxhn	www.xn--80ahaefyxhn.xn--j1afgaq.xn--p1ai/bin/view/%D0%9E%D0%A1%D0%BD%D0%BE%D0%B2%D0%B0/%D0%9E%D0%B1%D0%BD%D0%BE%D0%B2%D0%BB%D0%B5%D0%BD%D0%B8%D1%8F/2.5/
web	www.web.nvd.nist.gov/view/vuln/detail

24 Sep 2024 00:00Current

7.7High risk

Vulners AI Score7.7

CVSS 38.8

CVSS 210

EPSS0.0073

Firefox Web Render shared resource synchronization errors code execution