The vulnerability of Mozilla Firefox, Mozilla Firefox ESR, and the email client Thunderbird lies in the copying of buffers without checking the size of the input data. This allows an attacker to execute arbitrary code.

🗓️ 28 Sep 2022 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 7 Views

Buffer copy vulnerability in Firefox, Firefox ESR, and Thunderbird enables remote code execution via crafted website.

Reporter	Title	Published	Views	Family All 177
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Mozilla Firefox affect IBM Cloud Pak for Multicloud Management Monitoring	18 May 202111:41	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities of Mozilla Firefox (less than Firefox 78.9.0 ESR + CVE-2021-23987) have affected Synthetic Playback Agent 8.1.4.0-8.1.4 IF13 + CP4MCM2.2	12 May 202102:50	–	ibm
ALT Linux	Security fix for the ALT Linux 10 package firefox-esr version 78.9.0-alt1	23 Mar 202100:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 10 package thunderbird version 78.10.0-alt1	26 Apr 202100:00	–	altlinux
ATTACKERKB	CVE-2021-23987	31 Mar 202114:15	–	attackerkb
Tenable Nessus	Amazon Linux 2 : thunderbird (ALAS-2021-1632)	22 Apr 202100:00	–	nessus
Tenable Nessus	CentOS 8 : firefox (CESA-2021:0990)	26 Mar 202100:00	–	nessus
Tenable Nessus	CentOS 8 : thunderbird (CESA-2021:0993)	26 Mar 202100:00	–	nessus
Tenable Nessus	CentOS 7 : firefox (RHSA-2021:0992)	26 Mar 202100:00	–	nessus
Tenable Nessus	CentOS 7 : thunderbird (RHSA-2021:0996)	26 Mar 202100:00	–	nessus

Vulners

Node

OR

mozilla thunderbirdRange<78.9

mozilla firefox_esrRange<78.9

mozilla firefoxRange<87

red_hat red_hat_enterprise_linuxMatch6

red_hat red_hat_enterprise_linuxMatch7

red_hat red_hat_enterprise_linuxMatch8

novell suse_linux_enterprise_server_for_sap_applicationsMatch15

novell suse_linux_enterprise_serverMatch15-ltss

canonical ubuntuMatch20.10

novell opensuse_leapMatch15.2

canonical ubuntuMatch21.04

novell opensuse_leapMatch15.3

novell opensuse_leapMatch15.4

Source	Link
bugzilla	www.bugzilla.mozilla.org/buglist.cgi
cybersecurity-help	www.cybersecurity-help.cz/vdb/SB2021122914
mozilla	www.mozilla.org/en-US/security/advisories/mfsa2021-10/
mozilla	www.mozilla.org/en-US/security/advisories/mfsa2021-11/
mozilla	www.mozilla.org/en-US/security/advisories/mfsa2021-12/
ubuntu	www.ubuntu.com/security/CVE-2021-23987
ubuntu	www.ubuntu.com/security/notices/USN-4893-1
ubuntu	www.ubuntu.com/security/notices/USN-4995-1
ubuntu	www.ubuntu.com/security/notices/USN-4995-2
suse	www.suse.com/security/cve/CVE-2021-23987.html

16 Sep 2024 00:00Current

8.1High risk

Vulners AI Score8.1

CVSS 38.8

CVSS 210

EPSS0.01404

Mozilla Firefox Thunderbird buffer copy remote code execution crafted website