CVE-2021-38510

Reference Links

• https://bugzilla.mozilla.org/show_bug.cgi?id=1731779
• https://www.mozilla.org/en-US/security/advisories/mfsa2021-49/
• https://www.mozilla.org/en-US/security/advisories/mfsa2021-48/
• https://www.mozilla.org/en-US/security/advisories/mfsa2021-50/
• https://www.mozilla.org/security/advisories/mfsa2021-48/
• https://www.mozilla.org/security/advisories/mfsa2021-49/
• https://www.mozilla.org/security/advisories/mfsa2021-50/

Parent vulnerabilities

(Appears in the following advisories)

• MFSA2021-49
• MFSA2021-50
• MFSA2021-48

Peer vulnerabilities

(Found alongside the following vulnerabilities)

• CVE-2021-38503
• CVE-2021-38504
• CVE-2021-38505
• CVE-2021-38506
• CVE-2021-38507
• CVE-2021-43535
• CVE-2021-38508
• CVE-2021-38509
• CVE-2021-38510
• CVE-2021-43534
• CVE-2021-43529
• CVE-2021-43530
• CVE-2021-43531
• CVE-2021-43532
• CVE-2021-43533

Frequently Asked Questions

• What is the vulnerability ID?

  The vulnerability ID is CVE-2021-38510.

• What is the title of the vulnerability?

  The title of the vulnerability is 'The executable file warning was not presented when downloading .inetloc files which can run commands...'

• What is the affected software?

  The affected software includes Mozilla Firefox ESR version up to 91.3, Mozilla Firefox version up to 94, and Mozilla Thunderbird version up to 91.3.

• What is the severity of CVE-2021-38510?

  The severity of CVE-2021-38510 is medium (severity value: 4).

• How can I fix CVE-2021-38510?

  To fix CVE-2021-38510, users should update their Mozilla Firefox ESR version to 91.3, Mozilla Firefox version to 94, or Mozilla Thunderbird version to 91.3.