The vulnerability of Mozilla Firefox, Mozilla Firefox ESR, and the email client Thunderbird relates to the execution of operations outside the buffer in memory, allowing an attacker to execute arbitrary code.

🗓️ 16 Sep 2022 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 7 Views

Out-of-bounds buffer vulnerability in Firefox, Firefox extended support release, and Thunderbird allows arbitrary code from a crafted web page.

Reporter	Title	Published	Views	Family All 93
ALT Linux	Security fix for the ALT Linux 10 package thunderbird version 91.1.0-alt1	15 Sep 202100:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 10 package firefox-esr version 91.1.0-alt1	24 Sep 202100:00	–	altlinux
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Mozilla Firefox affect IBM Cloud Pak for Multicloud Management Monitoring.	31 Jan 202314:47	–	ibm
ATTACKERKB	CVE-2021-38495	3 Nov 202101:15	–	attackerkb
Tenable Nessus	Amazon Linux 2 : thunderbird (ALAS-2021-1720)	5 Nov 202100:00	–	nessus
Tenable Nessus	GLSA-202202-03 : Mozilla Firefox: Multiple vulnerabilities	17 Mar 202200:00	–	nessus
Tenable Nessus	GLSA-202208-14 : Mozilla Thunderbird: Multiple Vulnerabilities	10 Aug 202200:00	–	nessus
Tenable Nessus	Mozilla Firefox ESR < 91.1	8 Sep 202100:00	–	nessus
Tenable Nessus	Mozilla Thunderbird < 91.1	18 Nov 202500:00	–	nessus
Tenable Nessus	Mozilla Firefox ESR < 91.1	8 Sep 202100:00	–	nessus

Vulners

Node

OR

mozilla firefoxRange<92

mozilla firefox_esrRange<91.1

mozilla thunderbirdRange<91.1

novell suse_linux_enterprise_server_for_sap_applicationsMatch15

novell suse_linux_enterprise_serverMatch15-ltss

novell opensuse_leapMatch15.2

novell opensuse_leapMatch15.3

novell opensuse_leapMatch15.4

Source	Link
access	www.access.redhat.com/security/cve/cve-2021-38495
security	www.security.gentoo.org/glsa/202202-03
security	www.security.gentoo.org/glsa/202208-14
mozilla	www.mozilla.org/en-US/security/advisories/mfsa2021-40/
mozilla	www.mozilla.org/en-US/security/advisories/mfsa2021-41/
security-tracker	www.security-tracker.debian.org/tracker/CVE-2021-38495
suse	www.suse.com/security/cve/CVE-2021-38495.html
ubuntu	www.ubuntu.com/security/CVE-2021-38495
ubuntu	www.ubuntu.com/security/notices/USN-5248-1
cybersecurity-help	www.cybersecurity-help.cz/vdb/SB2021090711

03 Apr 2024 00:00Current

8.2High risk

Vulners AI Score8.2

CVSS 38.8

CVSS 210

EPSS0.01072

Firefox Firefox extended support Thunderbird Buffer overflow Crafted web page Arbitrary code