Remote Code Execution (RCE)

🗓️ 14 Oct 2021 14:59:58Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 25 Views

firefox-esr vulnerable to remote code execution due to memory issu

Reporter	Title	Published	Views	Family All 91
ALT Linux	Security fix for the ALT Linux 10 package thunderbird version 91.1.0-alt1	15 Sep 202100:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 10 package firefox-esr version 91.1.0-alt1	24 Sep 202100:00	–	altlinux
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Mozilla Firefox affect IBM Cloud Pak for Multicloud Management Monitoring.	31 Jan 202314:47	–	ibm
Tenable Nessus	Amazon Linux 2 : thunderbird (ALAS-2021-1720)	5 Nov 202100:00	–	nessus
Tenable Nessus	GLSA-202202-03 : Mozilla Firefox: Multiple vulnerabilities	17 Mar 202200:00	–	nessus
Tenable Nessus	GLSA-202208-14 : Mozilla Thunderbird: Multiple Vulnerabilities	10 Aug 202200:00	–	nessus
Tenable Nessus	Mozilla Firefox ESR < 91.1	8 Sep 202100:00	–	nessus
Tenable Nessus	Mozilla Thunderbird < 91.1	18 Nov 202500:00	–	nessus
Tenable Nessus	Mozilla Firefox ESR < 91.1	8 Sep 202100:00	–	nessus
Tenable Nessus	Mozilla Thunderbird < 91.1	18 Nov 202500:00	–	nessus

Vulners

Node

firefox-esr firefox-esrMatch78.9.0-r0os

AND

firefox-esr firefox-esrMatch68.5.0-r1os

AND

firefox-esr firefox-esrMatch78.8.0-r1os

AND

firefox-esr firefox-esrMatch78.10.0-r0os

AND

firefox-esr firefox-esrMatch68.6.0-r0os

AND

firefox-esr firefox-esrMatch68.6.1-r0os

AND

firefox-esr firefox-esrMatch78.8.0-r0os

AND

firefox-esr firefox-esrMatch68.8.0-r0os

AND

firefox-esr firefox-esrMatch78.12.0-r0os

AND

firefox-esr firefox-esrMatch68.7.0-r1os

AND

firefox-esr firefox-esrMatch68.7.0-r2os

AND

firefox-esr firefox-esrMatch78.11.0-r0os

AND

firefox-esr firefox-esrMatch78.13.0-r0os

AND

alpinelinux alpine_linuxMatchedge

focal focalMatch1:68.10.0+build1-0ubuntu0.20.04.1debian

AND

focal focalMatch1:78.5.0+build3-0ubuntu0.20.04.1debian

AND

focal focalMatch1:68.7.0+build1-0ubuntu2debian

AND

focal focalMatch1:78.13.0+build1-0ubuntu0.20.04.2debian

AND

debian debian_linux

google bionicMatch1:68.10.0+build1-0ubuntu0.18.04.1debian

AND

google bionicMatch1:52.7.0+build1-0ubuntu1debian

AND

google bionicMatch1:78.13.0+build1-0ubuntu0.18.04.1debian

AND

debian debian_linux

mozilla thunderbirdMatch68.6.0-r2os

AND

mozilla thunderbirdMatch78.9.0-r2os

AND

mozilla thunderbirdMatch68.6.0-r0os

AND

mozilla thunderbirdMatch78.7.0-r0os

AND

mozilla thunderbirdMatch68.7.0-r0os

AND

mozilla thunderbirdMatch68.8.1-r0os

AND

mozilla thunderbirdMatch78.9.0-r3os

AND

mozilla thunderbirdMatch68.5.0-r1os

AND

mozilla thunderbirdMatch68.7.0-r1os

AND

mozilla thunderbirdMatch68.8.0-r0os

AND

mozilla thunderbirdMatch78.9.0-r1os

AND

mozilla thunderbirdMatch78.9.0-r0os

AND

alpinelinux alpine_linuxMatchedge

Source	Link
secdb	www.secdb.alpinelinux.org/edge/community.yaml
security	www.security.gentoo.org/glsa/202202-03
security	www.security.gentoo.org/glsa/202208-14
bugzilla	www.bugzilla.mozilla.org/buglist.cgi
mozilla	www.mozilla.org/security/advisories/mfsa2021-40/
mozilla	www.mozilla.org/security/advisories/mfsa2021-41/

09 Dec 2022 22:29Current

4.1Medium risk

Vulners AI Score4.1

CVSS 26.8

CVSS 3.18.8

EPSS0.00537