CVE:CVE-2021-23994
CNNVD:CNNVD-202104-1339
Mozilla Firefox是美国Mozilla基金会的一款开源Web浏览器。
Mozilla Firefox 存在缓冲区错误漏洞，该漏洞源于在WebGL framebuffer中处理不受信任的输入时出现了边界错误。攻击者可利用该漏洞在目标系统上触发越界编写和执行任意代码。以下产品及版本受到影响：Mozilla Thunderbird: 60.0, 60.2.1, 60.3, 60.3.0, 60.3.1, 60.3.2, 60.3.3, 60.4, 60.4.0, 60.5, 60.5.0, 60.5.1, 60.5.2, 60.5.3, 60.6.0, 60.6.1, 60.7.0, 60.7.1, 60.7.2, 60.8.0, 60.9.0, 60.9.1, 68.0, 68.1.0, 68.1.1, 68.1.2, 68.2.0, 68.2.1, 68.2.2, 68.3.0, 68.3.1, 68.4.1, 68.4.2, 68.5.0, 68.6.0, 68.7.0, 68.8.0, 68.8.1, 68.9.0, 68.10.0, 68.11.0, 68.12.0, 68.12.1, 78.0, 78.0.1, 78.1.0, 78.1.1, 78.2.0, 78.2.1, 78.2.2, 78.3.0, 78.3.1, 78.3.2, 78.3.3, 78.4.0, 78.4.1, 78.4.2, 78.4.3, 78.5.0, 78.5.1, 78.6.0, 78.6.1, 78.7.0, 78.7.1, 78.8.0, 78.8.1, 78.9.0, 78.9.1。
solution:Upgrade mozilla firefox to a higher version than 88.0,and avoid the version (,88.0); Upgrade mozilla firefox_esr to a higher version than 78.10,and avoid the version (,78.10); Upgrade mozilla thunderbird to a higher version than 78.10,and avoid the version (,78.10)