Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2021-90102
HistoryAug 12, 2021 - 12:00 a.m.

Mozilla Firefox and Mozilla Thunderbird Input Validation Error Vulnerability

2021-08-1200:00:00
China National Vulnerability Database
www.cnvd.org.cn
12

0.002 Low

EPSS

Percentile

60.2%

Mozilla Firefox and Mozilla Thunderbird are both products of the Mozilla Foundation in the U.S. Mozilla Firefox is an open source Web browser. Mozilla Thunderbird is a separate set of email client software. The software supports IMAP and POP email protocols as well as HTML email formats. Mozilla Firefox is vulnerable to an input validation error, which exists due to insufficient input validation provided to the user when reducing register allocation during real-time range segmentation. A remote attacker could exploit the vulnerability to be able to create a specially crafted web page, trick a victim into visiting it, trigger a registration obfuscation failure in the jit code, and execute arbitrary code on the system. The vulnerability allows a remote attacker to compromise the affected system.