CVE:CVE-2021-43542
CNNVD:CNNVD-202112-543
Mozilla Firefox ESR是美国Mozilla基金会的Firefox(Web浏览器)的一个延长支持版本。
Mozilla Firefox ESR存在信息泄露漏洞，该漏洞源于使用XMLHttpRequest，攻击者可利用该漏洞可以通过探测加载外部协议的错误消息来识别已安装的应用程序。此漏洞影响雷鸟< 91.4.0,Firefox ESR < 91.4.0和Firefox < 95。
solution:Upgrade mozilla firefox to a higher version than 95.0,and avoid the version (,95.0); Upgrade mozilla firefox_esr to a higher version than 91.4.0,and avoid the version (,91.4.0); Upgrade mozilla thunderbird to a higher version than 91.4.0,and avoid the version (,91.4.0); Upgrade debian debian_linux to a higher version than 9.0,10.0,11.0,and avoid the version 9.0,10.0,11.0