The vulnerability in web browsers Firefox, Firefox ESR, and the email client Thunderbird relates to the ability to write beyond the buffer limits. This allows attackers to access confidential data, compromise its integrity, and cause service interruptions.

🗓️ 20 Jul 2021 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 9 Views

Buffer overflow flaw in Firefox, Firefox ESR, and Thunderbird exposes data, harms integrity, and disrupts service.

Reporter	Title	Published	Views	Family All 469
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Multicloud Management Monitoringhas applied security fixes for its use of Mozilla Firefox	1 Dec 202115:13	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities of Mozilla Firefox (less than Firefox 78.14.0 ESR + CVE-2021-29967) have affected Synthetic Playback Agent 8.1.4.0-8.1.4 IF14	28 Sep 202116:45	–	ibm
ALT Linux	Security fix for the ALT Linux 10 package thunderbird version 78.12.0-alt1	14 Jul 202100:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 10 package firefox-esr version 78.12.0-alt1	12 Jul 202100:00	–	altlinux
ATTACKERKB	CVE-2021-29976	5 Aug 202120:15	–	attackerkb
Tenable Nessus	Amazon Linux 2 : thunderbird (ALAS-2021-1709)	16 Sep 202100:00	–	nessus
Tenable Nessus	CentOS 8 : firefox (CESA-2021:2743)	16 Jul 202100:00	–	nessus
Tenable Nessus	CentOS 8 : thunderbird (CESA-2021:2883)	1 Aug 202100:00	–	nessus
Tenable Nessus	CentOS 7 : firefox (RHSA-2021:2741)	15 Jul 202100:00	–	nessus
Tenable Nessus	CentOS 7 : thunderbird (RHSA-2021:2881)	9 Oct 202400:00	–	nessus

Vulners

Node

OR

mozilla firefoxRange<90

mozilla firefox_esrRange<78.12

mozilla thunderbirdRange<78.12

red_hat red_hat_enterprise_linuxMatch7

red_hat red_hat_enterprise_linuxMatch8

Source	Link
redos	www.redos.red-soft.ru/updatesec/
cybersecurity-help	www.cybersecurity-help.cz/vdb/SB2021071380
securitylab	www.securitylab.ru/vulnerability/522218.php
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-29976
security-tracker	www.security-tracker.debian.org/tracker/CVE-2021-29976
mozilla	www.mozilla.org/en-US/security/advisories/mfsa2021-28/
mozilla	www.mozilla.org/en-US/security/advisories/mfsa2021-29/
mozilla	www.mozilla.org/en-US/security/advisories/mfsa2021-30/
bugzilla	www.bugzilla.mozilla.org/buglist.cgi
access	www.access.redhat.com/security/cve/CVE-2021-29976

24 Sep 2024 00:00Current

7.3High risk

Vulners AI Score7.3

CVSS 38.8

CVSS 210

EPSS0.01223

Firefox Extended Support Release Thunderbird Buffer overflow Data exposure Integrity compromise Service disruption