CVE-2021-23973
Summary
| CVE | CVE-2021-23973 |
|---|
| State | PUBLIC |
|---|
| Assigner | [email protected] |
|---|
| Source Priority | CVE Program / NVD first with legacy fallback |
|---|
| Published | 2021-02-26 02:15:00 UTC |
|---|
| Updated | 2022-05-27 18:04:00 UTC |
|---|
| Description | When trying to load a cross-origin resource in an audio/video context a decoding error may have resulted, and the content of that error may have revealed information about the resource. This vulnerability affects Firefox < 86, Thunderbird < 78.8, and Firefox ESR < 78.8. |
|---|
NVD Known Affected Configurations (CPE 2.3)
References
| Reference | Source | Link | Tags |
|---|
| Mozilla Firefox: Multiple vulnerabilities (GLSA 202104-10) — Gentoo security |
GENTOO |
security.gentoo.org |
|
| Debian -- Security Information -- DSA-4866-1 thunderbird |
DEBIAN |
www.debian.org |
Third Party Advisory |
| Mozilla Thunderbird: Multiple vulnerabilities (GLSA 202104-09) — Gentoo security |
GENTOO |
security.gentoo.org |
|
| Security Vulnerabilities fixed in Firefox 86 — Mozilla |
MISC |
www.mozilla.org |
Release Notes, Vendor Advisory |
| Security Vulnerabilities fixed in Firefox ESR 78.8 — Mozilla |
MISC |
www.mozilla.org |
Release Notes, Vendor Advisory |
| Security Vulnerabilities fixed in Thunderbird 78.8 — Mozilla |
MISC |
www.mozilla.org |
Release Notes, Vendor Advisory |
| [SECURITY] [DLA 2578-1] thunderbird security update |
MLIST |
lists.debian.org |
Mailing List, Third Party Advisory |
| Access Denied |
MISC |
bugzilla.mozilla.org |
Issue Tracking, Permissions Required, Vendor Advisory |
| CVE Program record |
CVE.ORG |
www.cve.org |
canonical |
| NVD vulnerability detail |
NVD |
nvd.nist.gov |
canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 180286 Debian Security Update for firefox-esrthunderbird (CVE-2021-23973)
- 198355 Ubuntu Security Notification for Thunderbird vulnerabilities (USN-4936-1)
- 296069 Oracle Solaris 11.4 Support Repository Update (SRU) 31.88.5 Missing (CPUJAN2021)
- 352250 Amazon Linux Security Advisory for thunderbird: ALAS2-2021-1618
- 500941 Alpine Linux Security Update for firefox-esr
- 501555 Alpine Linux Security Update for firefox
- 502379 Alpine Linux Security Update for thunderbird
- 503846 Alpine Linux Security Update for firefox
- 630669 Mozilla Firefox for Android and iOS Multiple Vulnerabilities (MFSA2021-07)
- 710019 Gentoo Linux Mozilla Thunderbird Multiple Vulnerabilities (GLSA 202104-09)
- 710020 Gentoo Linux Mozilla Firefox Multiple Vulnerabilities (GLSA 202104-10)
- 750329 OpenSUSE Security Update for MozillaThunderbird (openSUSE-SU-2021:0387-1)
- 750336 OpenSUSE Security Update for MozillaFirefox (openSUSE-SU-2021:0373-1)
- 940157 AlmaLinux Security Update for thunderbird (ALSA-2021:0657)
- 940358 AlmaLinux Security Update for firefox (ALSA-2021:0655)
