Arbitrary Code Execution

🗓️ 21 Apr 2021 18:13:46Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 27 Views

firefox arbitrary code execution vulnerability via font cach

Reporter	Title	Published	Views	Family All 50
AlpineLinux	CVE-2021-23997	24 Jun 202113:25	–	alpinelinux
ArchLinux	[ASA-202104-3] firefox: multiple issues	29 Apr 202100:00	–	archlinux
AstraLinux	Astra Linux - уязвимость в firefox	3 May 202623:59	–	astralinux
CNNVD	Mozilla Firefox 资源管理错误漏洞	19 Apr 202100:00	–	cnnvd
CNVD	Mozilla Firefox Resource Management Error Vulnerability (CNVD-2021-36258)	21 Apr 202100:00	–	cnvd
CVE	CVE-2021-23997	24 Jun 202113:25	–	cve
Cvelist	CVE-2021-23997	24 Jun 202113:25	–	cvelist
Debian CVE	CVE-2021-23997	24 Jun 202113:25	–	debiancve
EUVD	EUVD-2021-10917	7 Oct 202500:30	–	euvd
Kaspersky	KLA12149 Multiple vulnerabilities in Mozilla Firefox	19 Apr 202100:00	–	kaspersky

Vulners

Node

debian debian_linuxMatch999

alpinelinux alpine_linuxMatch3.13

alpinelinux alpine_linuxMatchedge

debian debian_linux

mozilla firefoxMatch81.0-2debian

AND

mozilla firefoxMatch82.0.3-1debian

AND

mozilla firefoxMatch83.0-1debian

AND

debian debian_linuxMatch999

mozilla firefoxMatch85.0.2-r0os

AND

mozilla firefoxMatch87.0-r0os

AND

alpinelinux alpine_linuxMatch3.13

mozilla firefoxMatch73.0.1-r1os

AND

mozilla firefoxMatch87.0-r0os

AND

mozilla firefoxMatch74.0-r1os

AND

mozilla firefoxMatch75.0-r1os

AND

mozilla firefoxMatch74.0.1-r0os

AND

mozilla firefoxMatch75.0-r2os

AND

mozilla firefoxMatch76.0-r0os

AND

mozilla firefoxMatch85.0.2-r1os

AND

mozilla firefoxMatch76.0.1-r1os

AND

mozilla firefoxMatch85.0.2-r0os

AND

mozilla firefoxMatch76.0.1-r0os

AND

alpinelinux alpine_linuxMatchedge

google bionicMatch80.0.1+build1-0ubuntu0.18.04.1debian

AND

google bionicMatch83.0+build2-0ubuntu0.18.04.2debian

AND

google bionicMatch59.0.2+build1-0ubuntu1debian

AND

google bionicMatch80.0+build2-0ubuntu0.18.04.1debian

AND

debian debian_linux

focal focalMatch75.0+build3-0ubuntu1debian

AND

focal focalMatch80.0.1+build1-0ubuntu0.20.04.1debian

AND

focal focalMatch80.0+build2-0ubuntu0.20.04.1debian

AND

focal focalMatch83.0+build2-0ubuntu0.20.04.1debian

AND

debian debian_linux

hirsute hirsuteMatch86.0+build3-0ubuntu1debian

AND

hirsute hirsuteMatch83.0+build2-0ubuntu1debian

AND

debian debian_linux

apache groovyMatch81.0+build1-0ubuntu1debian

AND

apache groovyMatch83.0+build2-0ubuntu0.20.10.1debian

AND

apache groovyMatch81.0.2+build1-0ubuntu1debian

AND

apache groovyMatch78.0.1+build1-0ubuntu1debian

AND

apache groovyMatch80.0.1+build1-0ubuntu1debian

AND

apache groovyMatch80.0+build2-0ubuntu2debian

AND

debian debian_linux

xenial xenialMatch80.0.1+build1-0ubuntu0.16.04.1debian

AND

xenial xenialMatch45.0.2+build1-0ubuntu1debian

AND

xenial xenialMatch80.0+build2-0ubuntu0.16.04.1debian

AND

xenial xenialMatch83.0+build2-0ubuntu0.16.04.3debian

AND

xenial xenialMatch86.0+build3-0ubuntu0.16.04.1debian

AND

debian debian_linux

devel develMatch81.0+build1-0ubuntu1debian

AND

devel develMatch80.0.1+build1-0ubuntu1debian

AND

devel develMatch83.0+build2-0ubuntu1debian

AND

devel develMatch78.0.1+build1-0ubuntu1debian

AND

devel develMatch86.0+build3-0ubuntu1debian

AND

debian debian_linux

Source	Link
cisecurity	www.cisecurity.org/advisory/multiple-vulnerabilities-in-mozilla-firefox-and-thunderbird-could-allow-for-arbitrary-code-execution_2021-051/
security-tracker	www.security-tracker.debian.org/tracker/CVE-2021-23997
bugzilla	www.bugzilla.mozilla.org/show_bug.cgi
mozilla	www.mozilla.org/security/advisories/mfsa2021-16/

25 Jun 2021 00:36Current

3.8Low risk

Vulners AI Score3.8

CVSS 26.8

CVSS 3.18.8

EPSS0.00186