CVE-2021-23995 - log back

CVE-2021-23995 edited at 19 Apr 2021 14:22:34
Description
- A security issue has been found in Firefox before version 88. When Responsive Design Mode was enabled, it used references to objects that were previously freed. Mozilla presumes that with enough effort this could have been exploited to run arbitrary code.
+ A security issue has been found in Firefox before version 88 and Thunderbird before version 78.10. When Responsive Design Mode was enabled, it used references to objects that were previously freed. Mozilla presumes that with enough effort this could have been exploited to run arbitrary code.
References
https://www.mozilla.org/en-US/security/advisories/mfsa2021-16/#CVE-2021-23995
+ https://www.mozilla.org/en-US/security/advisories/mfsa2021-14/#CVE-2021-23995
https://bugzilla.mozilla.org/show_bug.cgi?id=1699835
Notes
CVE-2021-23995 edited at 19 Apr 2021 13:32:16
Severity
- Unknown
+ High
Remote
- Unknown
+ Remote
Type
- Unknown
+ Arbitrary code execution
Description
+ A security issue has been found in Firefox before version 88. When Responsive Design Mode was enabled, it used references to objects that were previously freed. Mozilla presumes that with enough effort this could have been exploited to run arbitrary code.
References
+ https://www.mozilla.org/en-US/security/advisories/mfsa2021-16/#CVE-2021-23995
+ https://bugzilla.mozilla.org/show_bug.cgi?id=1699835
CVE-2021-23995 created at 19 Apr 2021 13:29:45