Vulnerability CVE-2021-23995: Information

Description

When Responsive Design Mode was enabled, it used references to objects that were previously freed. We presume that with enough effort this could have been exploited to run arbitrary code. This vulnerability affects Firefox ESR < 78.10, Thunderbird < 78.10, and Firefox < 88.

Severity: HIGH (8.8) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Published: June 24, 2021
Modified: July 2, 2021
Error type identifier: CWE-672

Fixed packages

References to Advisories, Solutions, and Tools

Hyperlink
Resource
https://www.mozilla.org/security/advisories/mfsa2021-15/
  • Release Notes
  • Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2021-16/
  • Release Notes
  • Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2021-14/
  • Release Notes
  • Vendor Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=1699835
  • Issue Tracking
  • Permissions Required
  • Vendor Advisory
    1. Configuration 1

      cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*
      End excliding
      78.10

      cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*
      End excliding
      88.0

      cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*
      End excliding
      78.10