CVE:CVE-2021-43537
CNNVD:CNNVD-202112-547
Mozilla Firefox ESR是美国Mozilla基金会的Firefox(Web浏览器)的一个延长支持版本。
Mozilla Firefox ESR存在代码问题漏洞，该漏洞源于将大小从64位转换为32位整数的错误类型会使攻击者可利用该漏洞破坏内存，从而可能导致崩溃。此漏洞影响雷鸟< 91.4.0,Firefox ESR < 91.4.0和Firefox < 95。
solution:Upgrade mozilla firefox to a higher version than 95.0,and avoid the version (,95.0); Upgrade mozilla firefox_esr to a higher version than 91.4.0,and avoid the version (,91.4.0); Upgrade mozilla thunderbird to a higher version than 91.4.0,and avoid the version (,91.4.0); Upgrade debian debian_linux to a higher version than 9.0,10.0,11.0,and avoid the version 9.0,10.0,11.0