CVE:CVE-2021-38510
CNNVD:CNNVD-202111-285
Mozilla Firefox是美国Mozilla基金会的一款开源Web浏览器。
Mozilla Firefox 存在命令注入漏洞，该漏洞源于下载 .inetloc 文件时未显示可执行文件警告，该文件可以在用户计算机上运行命令。
solution:Upgrade mozilla firefox to a higher version than 94.0,and avoid the version (,94.0); Upgrade mozilla firefox_esr to a higher version than 91.3.0,and avoid the version (,91.3.0); Upgrade mozilla thunderbird to a higher version than 91.3.0,and avoid the version (,91.3.0)