SecuritySpace - CVE-2021-29949

Vulnerability Search		Search 324607 CVE descriptions and 146377 test descriptions, access 10,000+ cross references.
	Tests CVE All

CVE ID: CVE-2021-29949

Description: When loading the shared library that provides the OTR protocol implementation, Thunderbird will initially attempt to open it using a filename that isn't distributed by Thunderbird. If a computer has already been infected with a malicious library of the alternative filename, and the malicious library has been copied to a directory that is contained in the search path for executable libraries, then Thunderbird will load the incorrect library. This vulnerability affects Thunderbird < 78.9.1.

Test IDs: None available

Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2021-29949
https://bugzilla.mozilla.org/show_bug.cgi?id=1682101
https://bugzilla.mozilla.org/show_bug.cgi?id=1682101
https://www.mozilla.org/security/advisories/mfsa2021-13/
https://www.mozilla.org/security/advisories/mfsa2021-13/

CVE ID:	CVE-2021-29949
Description:	When loading the shared library that provides the OTR protocol implementation, Thunderbird will initially attempt to open it using a filename that isn't distributed by Thunderbird. If a computer has already been infected with a malicious library of the alternative filename, and the malicious library has been copied to a directory that is contained in the search path for executable libraries, then Thunderbird will load the incorrect library. This vulnerability affects Thunderbird < 78.9.1.
Test IDs:	None available
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2021-29949 https://bugzilla.mozilla.org/show_bug.cgi?id=1682101 https://bugzilla.mozilla.org/show_bug.cgi?id=1682101 https://www.mozilla.org/security/advisories/mfsa2021-13/ https://www.mozilla.org/security/advisories/mfsa2021-13/