Security Alert (A21-02-04): Vulnerability in Firefox

Description:

Mozilla has published an advisory (MFSA 2021-06) to address a vulnerability in Firefox browser. Only Windows versions are affected. A remote attacker could entice a user running a vulnerable browser to visit a web page with specially crafted content to exploit the vulnerabilities.

Affected Systems:

• Firefox ESR Windows versions prior to version 78.7.1
• Firefox Windows versions prior to version 85.0.1

Impact:

Successful exploitation of the vulnerability could lead to buffer overflow on an affected system.

Recommendation:

Mozilla has released new versions of the product to address the issues and they can be downloaded at the following URLs:

• Firefox 85.0.1 for Windows
  https://www.mozilla.org/en-US/firefox/all/
• Firefox ESR 78.7.1 for Windows
  https://www.mozilla.org/en-US/firefox/organizations/all/

Users of affected systems should follow the recommendations provided by the product vendor and take immediate actions to mitigate the risk.

More Information:

• https://www.mozilla.org/en-US/security/advisories/mfsa2021-06/
• https://us-cert.cisa.gov/ncas/current-activity/2021/02/08/mozilla-releases-security-updates-firefox-and-firefox-esr