CVE:CVE-2021-43539
CNNVD:CNNVD-202112-544
Mozilla Firefox ESR是美国Mozilla基金会的Firefox(Web浏览器)的一个延长支持版本。
Mozilla Firefox ESR存在资源管理错误漏洞，该漏洞源于在wasm实例调用中正确记录活动指针的位置失败，导致在调用中发生GC，而没有跟踪那些活动指针。这可能会导致使用后无导致潜在的利用崩溃。此漏洞影响雷鸟< 91.4.0,Firefox ESR < 91.4.0和Firefox < 95。
solution:Upgrade mozilla firefox to a higher version than 95.0,and avoid the version (,95.0); Upgrade mozilla firefox_esr to a higher version than 91.4.0,and avoid the version (,91.4.0); Upgrade mozilla thunderbird to a higher version than 91.4.0,and avoid the version (,91.4.0); Upgrade debian debian_linux to a higher version than 9.0,10.0,11.0,and avoid the version 9.0,10.0,11.0