Lucene search

CVE-2021-43537

🗓️ 08 Dec 2021 22:09:15Reported by mozillaType

cve🔗 web.nvd.nist.gov👁 195 Views🌐 4 Media mentions

Incorrect size conversion allows memory corruption in Thunderbird, Firefo

Reporter	Title	Published	Views	Family All 155
Veracode	Denial Of Service (DoS)	10 Dec 202107:36	–	veracode
Prion	Type confusion	8 Dec 202122:15	–	prion
CNVD	Mozilla Firefox ESR code issue vulnerability (CNVD-2021-99620)	12 Dec 202100:00	–	cnvd
Debian CVE	CVE-2021-43537	8 Dec 202122:15	–	debiancve
AlpineLinux	CVE-2021-43537	8 Dec 202122:15	–	alpinelinux
Cvelist	CVE-2021-43537	8 Dec 202121:20	–	cvelist
RedhatCVE	CVE-2021-43537	8 Dec 202102:49	–	redhatcve
UbuntuCve	CVE-2021-43537	8 Dec 202100:00	–	ubuntucve
NVD	CVE-2021-43537	8 Dec 202122:15	–	nvd
Tenable Nessus	SUSE SLES11 Security Update : MozillaFirefox (SUSE-SU-2021:14859-1)	11 Dec 202100:00	–	nessus

Nvd

Vulners

Node

mozilla firefoxRange<95.0

mozilla firefox_esrRange<91.4.0

mozilla thunderbirdRange<91.4.0

Node

debian debian_linuxMatch9.0

debian debian_linuxMatch10.0

debian debian_linuxMatch11.0

[
  {
    "product": "Thunderbird",
    "vendor": "Mozilla",
    "versions": [
      {
        "lessThan": "91.4.0",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "Firefox ESR",
    "vendor": "Mozilla",
    "versions": [
      {
        "lessThan": "91.4.0",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "Firefox",
    "vendor": "Mozilla",
    "versions": [
      {
        "lessThan": "95",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
debian	www.debian.org/security/2021/dsa-5026
debian	www.debian.org/security/2022/dsa-5034
security	www.security.gentoo.org/glsa/202208-14
mozilla	www.mozilla.org/security/advisories/mfsa2021-52/
lists	www.lists.debian.org/debian-lts-announce/2021/12/msg00030.html
lists	www.lists.debian.org/debian-lts-announce/2022/01/msg00001.html
mozilla	www.mozilla.org/security/advisories/mfsa2021-54/
bugzilla	www.bugzilla.mozilla.org/show_bug.cgi
security	www.security.gentoo.org/glsa/202202-03
mozilla	www.mozilla.org/security/advisories/mfsa2021-53/

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

08 Dec 2021 22:15Current

8.8High risk

Vulners AI Score8.8

CVSS26.8

CVSS38.8

EPSS0.005

CWE-704