CVE-2021-29964
N/A
N/A
Summary
A locally-installed hostile program could send WM_COPYDATA messages that Firefox would process incorrectly, leading to an out-of-bounds read. This bug only affects Firefox on Windows. Other operating systems are unaffected.. This vulnerability affects Thunderbird < 78.11, Firefox < 89, and Firefox ESR < 78.11.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Mozilla | Thunderbird | unspecified < 78.11 | affected |
| Mozilla | Firefox | unspecified < 89 | affected |
| Mozilla | Firefox ESR | unspecified < 78.11 | affected |
Weaknesses
- Out of bounds-read when parsing a
WM_COPYDATAmessage
ADP Enrichment
CVE Program Container
Additional References
- https://www.mozilla.org/security/advisories/mfsa2021-26/
- https://www.mozilla.org/security/advisories/mfsa2021-24/
- https://www.mozilla.org/security/advisories/mfsa2021-23/
- https://bugzilla.mozilla.org/show_bug.cgi?id=1706501
References
- https://www.mozilla.org/security/advisories/mfsa2021-26/
- https://www.mozilla.org/security/advisories/mfsa2021-24/
- https://www.mozilla.org/security/advisories/mfsa2021-23/
- https://bugzilla.mozilla.org/show_bug.cgi?id=1706501
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.