QID 375943

Date Published: 2021-10-07

QID 375943: Mozilla Firefox ESR Multiple Vulnerabilities (MFSA2021-45)

Firefox is a free and open-source web browser developed for Windows, OS X, and Linux, with a mobile version for Android.

Affected Products:
Prior to Firefox ESR 91.2

QID Detection Logic (Authenticated) :
This checks for vulnerable versions of the Firefox browser.

successful exploitation of this vulnerability may allow an attacker to corrupt memory leading to a potentially exploitable crash.

  • CVSS V3 rated as Critical - 9.8 severity.
  • CVSS V2 rated as High - 6.8 severity.
  • Solution
    Vendor has released fix to address these vulnerabilities. Refer to MFSA2021-45
    Software Advisories
    Advisory ID Software Component Link
    MFSA2021-45 URL Logo www.mozilla.org/en-US/security/advisories/mfsa2021-45/