DeutschShown in its original language — a full translation is planned for a future version.
Mozilla Firefox/Thunderbird: Mehrere Schwachstellen
view advisory published 2020-06-30
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Mozilla Firefox und Thunderbird ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen.
01
describes (14)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2020-15648US | medium6.5 | — | ||
Using object or embed tags, it was possible to frame other websites, even if they disallowed framing using the X-Frame-Options header. This vulnerability affects Thunderbird < 78 a… | ||||
| CVE-2020-12426US | high8.8 | — | ||
Mozilla developers and community members reported memory safety bugs present in Firefox 77. Some of these bugs showed evidence of memory corruption and we presume that with enough… | ||||
| CVE-2020-12425US | medium6.5 | — | ||
Due to confusion processing a hyphen character in Date.parse(), a one-byte out of bounds read could have occurred, leading to potential information disclosure. This vulnerability a… | ||||
| CVE-2020-12423US | high7.8 | — | ||
When the Windows DLL "webauthn.dll" was missing from the Operating System, and a malicious one was placed in a folder in the user's %PATH%, Firefox may have loaded the DLL, leading… | ||||
| CVE-2020-12422US | high8.8 | — | ||
In non-standard configurations, a JPEG image created by JavaScript could have caused an internal variable to overflow, resulting in an out of bounds write, memory corruption, and a… | ||||
| CVE-2020-12421US | medium6.5 | — | ||
When performing add-on updates, certificate chains terminating in non-built-in-roots were rejected (even if they were legitimately added by an administrator.) This could have cause… | ||||
| CVE-2020-12420US | high8.8 | — | ||
When trying to connect to a STUN server, a race condition could have caused a use-after-free of a pointer, leading to memory corruption and a potentially exploitable crash. This vu… | ||||
| CVE-2020-12419US | high8.8 | — | ||
When processing callbacks that occurred during window flushing in the parent process, the associated window may die; causing a use-after-free condition. This could have led to memo… | ||||
| CVE-2020-12418US | medium6.5 | — | ||
Manipulating individual parts of a URL object could have caused an out-of-bounds read, leaking process memory to malicious JavaScript. This vulnerability affects Firefox ESR < 68.1… | ||||
| CVE-2020-12417US | high8.8 | — | ||
Due to confusion about ValueTags on JavaScript Objects, an object may pass through the type barrier, resulting in memory corruption and a potentially exploitable crash. *Note: this… | ||||
| CVE-2020-12416US | high8.8 | — | ||
A VideoStreamEncoder may have been freed in a race condition with VideoBroadcaster::AddOrUpdateSink, resulting in a use-after-free, memory corruption, and a potentially exploitable… | ||||
| CVE-2020-12415US | medium6.5OT elevated | — | ||
When "%2F" was present in a manifest URL, Firefox's AppCache behavior may have become confused and allowed a manifest to be served from a subdirectory. This could cause the appcach… | ||||
| CVE-2020-12402US | medium4.4OT elevated | — | ||
During RSA key generation, bignum implementations used a variation of the Binary Extended Euclidean Algorithm which entailed significantly input-dependent flow. This allowed an att… | ||||
| CVE-2020-12424US | medium6.5OT elevated | — | ||
When constructing a permission prompt for WebRTC, a URI was supplied from the content process. This URI was untrusted, and could have been the URI of an origin that was previously… | ||||
02
references
External citations — patches, advisories, analysis.
- CentOS Security Advisory CESA-2020:2824 vom 2020-07-08external
- CentOS Security Advisory CESA-2020:2827 vom 2020-07-08external
- SUSE Security Update SUSE-SU-2020:14421-1 vom 2020-07-08external
- SUSE Security Update SUSE-SU-2020:1899-1 vom 2020-07-13external
- SUSE Security Update SUSE-SU-2020:1900-1 vom 2020-07-13external
- SUSE Security Update SUSE-SU-2020:1898-1 vom 2020-07-13external
- Red Hat Security Advisory RHSA-2020:2824 vom 2020-07-06external
- Red Hat Security Advisory RHSA-2020:2825 vom 2020-07-06external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan