CVE-2021-23978

🗓️ 26 Feb 2021 15:28:11Reported by mozillaType

cve🔗 web.nvd.nist.gov📰️ 5 Media mentions👁 288 Views

Mozilla reported memory safety bugs in Firefox 85 and Firefox ESR 78.7, potentially allowing arbitrary code execution

Reporter	Title	Published	Views	Family All 173
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Mozilla Firefox affect IBM Cloud Pak for Multicloud Management Monitoring	18 May 202111:41	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities of Mozilla Firefox (less than Firefox 78.9.0 ESR + CVE-2021-23978) have affected Synthetic Playback Agent 8.1.4.0-8.1.4 IF13 + CP4MCM2.2	12 May 202102:37	–	ibm
ALT Linux	Security fix for the ALT Linux 10 package thunderbird version 78.8.0-alt1	25 Feb 202100:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 10 package firefox-esr version 78.8.0-alt1	23 Feb 202100:00	–	altlinux
Tenable Nessus	Amazon Linux 2 : thunderbird (ALAS-2021-1618)	19 Mar 202100:00	–	nessus
Tenable Nessus	CentOS 8 : firefox (CESA-2021:0655)	27 Feb 202100:00	–	nessus
Tenable Nessus	CentOS 8 : thunderbird (CESA-2021:0657)	27 Feb 202100:00	–	nessus
Tenable Nessus	CentOS 7 : firefox (RHSA-2021:0656)	27 Feb 202100:00	–	nessus
Tenable Nessus	CentOS 7 : thunderbird (RHSA-2021:0661)	27 Feb 202100:00	–	nessus
Tenable Nessus	Debian DLA-2575-1 : firefox-esr security update	1 Mar 202100:00	–	nessus

NVD

Vulners

Node

mozilla firefoxRange<86.0

mozilla firefox_esrRange<78.8

mozilla thunderbirdRange<78.8

Node

debian debian_linuxMatch9.0

debian debian_linuxMatch10.0

[
  {
    "product": "Firefox",
    "vendor": "Mozilla",
    "versions": [
      {
        "status": "affected",
        "version": "< 86"
      }
    ]
  },
  {
    "product": "Thunderbird",
    "vendor": "Mozilla",
    "versions": [
      {
        "status": "affected",
        "version": "< 78.8"
      }
    ]
  },
  {
    "product": "Firefox ESR",
    "vendor": "Mozilla",
    "versions": [
      {
        "status": "affected",
        "version": "< 78.8"
      }
    ]
  }
]

Source	Link
bugzilla	www.bugzilla.mozilla.org/buglist.cgi
lists	www.lists.debian.org/debian-lts-announce/2021/03/msg00000.html
mozilla	www.mozilla.org/security/advisories/mfsa2021-07/
mozilla	www.mozilla.org/security/advisories/mfsa2021-08/
security	www.security.gentoo.org/glsa/202104-10
debian	www.debian.org/security/2021/dsa-4866
mozilla	www.mozilla.org/security/advisories/mfsa2021-09/
security	www.security.gentoo.org/glsa/202104-09

21 Nov 2024 05:52Current

9.1High risk

Vulners AI Score9.1

CVSS 26.8

CVSS 3.18.8

EPSS0.01222

CWE-787

cve-2021-23978 mozilla firefox 85 firefox esr 78.7 memory safety bugs memory corruption arbitrary code execution nvd vulnerability