ID CVE-2021-29966
Summary Mozilla developers reported memory safety bugs present in Firefox 88. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 89.
References
Vulnerable Configurations
  • cpe:2.3:a:mozilla:firefox:79.0:*:*:*:*:*:*:*
    cpe:2.3:a:mozilla:firefox:79.0:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:firefox:80.0:*:*:*:*:*:*:*
    cpe:2.3:a:mozilla:firefox:80.0:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:firefox:80.0:*:*:*:*:android:*:*
    cpe:2.3:a:mozilla:firefox:80.0:*:*:*:*:android:*:*
  • cpe:2.3:a:mozilla:firefox:80.0:*:*:*:android:*:*:*
    cpe:2.3:a:mozilla:firefox:80.0:*:*:*:android:*:*:*
  • cpe:2.3:a:mozilla:firefox:81.0:*:*:*:*:*:*:*
    cpe:2.3:a:mozilla:firefox:81.0:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:firefox:82.0:*:*:*:*:*:*:*
    cpe:2.3:a:mozilla:firefox:82.0:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:firefox:82.0.3:*:*:*:*:*:*:*
    cpe:2.3:a:mozilla:firefox:82.0.3:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:firefox:83.0:*:*:*:*:*:*:*
    cpe:2.3:a:mozilla:firefox:83.0:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:firefox:83.0:*:*:*:*:android:*:*
    cpe:2.3:a:mozilla:firefox:83.0:*:*:*:*:android:*:*
  • cpe:2.3:a:mozilla:firefox:84.0:*:*:*:*:*:*:*
    cpe:2.3:a:mozilla:firefox:84.0:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:firefox:84.0:*:*:*:*:android:*:*
    cpe:2.3:a:mozilla:firefox:84.0:*:*:*:*:android:*:*
  • cpe:2.3:a:mozilla:firefox:84.0.2:*:*:*:*:*:*:*
    cpe:2.3:a:mozilla:firefox:84.0.2:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:firefox:84.1.3:*:*:*:*:android:*:*
    cpe:2.3:a:mozilla:firefox:84.1.3:*:*:*:*:android:*:*
  • cpe:2.3:a:mozilla:firefox:85.0:*:*:*:*:*:*:*
    cpe:2.3:a:mozilla:firefox:85.0:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:firefox:85.0.1:*:*:*:*:*:*:*
    cpe:2.3:a:mozilla:firefox:85.0.1:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:firefox:85.0.2:*:*:*:*:*:*:*
    cpe:2.3:a:mozilla:firefox:85.0.2:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:firefox:87.0:*:*:*:*:*:*:*
    cpe:2.3:a:mozilla:firefox:87.0:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:firefox:88.0:*:*:*:*:*:*:*
    cpe:2.3:a:mozilla:firefox:88.0:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:firefox:88.0.1:*:*:*:*:*:*:*
    cpe:2.3:a:mozilla:firefox:88.0.1:*:*:*:*:*:*:*
CVSS
Base: 6.8 (as of 03-05-2022 - 16:04)
Impact:
Exploitability:
CWE CWE-787
CAPEC
Access
VectorComplexityAuthentication
NETWORK MEDIUM NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL PARTIAL PARTIAL
cvss-vector via4 AV:N/AC:M/Au:N/C:P/I:P/A:P
Last major update 03-05-2022 - 16:04
Published 24-06-2021 - 14:15
Last modified 03-05-2022 - 16:04
Back to Top