PT-2020-13105 · Mozilla+3 · Firefox+3

Rayyan Bijoora · Published 2020-06-02 · Updated 2024-12-12 · CVE-2020-12408

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 77

Description The issue allows an attacker to insert certain characters to flip domain and path information in the address bar when browsing a document hosted on an IP address.

Recommendations For versions prior to 77, update to version 77 or later to resolve the issue.

Exploit

Fix

Related Identifiers

ALT-PU-2020-2127

ALT-PU-2020-2408

ALT-PU-2020-2933

ALT-PU-2020-3442

ALT-PU-2021-1368

ALT-PU-2021-3368

CVE-2020-12408

OPENSUSE-SU-2024:10600-1

OPENSUSE-SU-2024:14572-1

USN-4383-1

Affected Products

Alt Linux

Firefox

Linuxmint

Ubuntu

References · 1892

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/firefox_jit_use_after_free.rb · Exploit
• 🔥 https://github.com/maxpl0it/CVE-2019-17026-Exploit · Exploit
• 🔥 https://github.com/aleksejspopovs/cve-2020-16012 · Exploit
• 🔥 https://github.com/lsw29475/CVE-2019-17026 · Exploit
• 🔥 https://github.com/R0jhack/CVE-2020-6514 · Exploit
• 🔥 https://github.com/hasan-khalil/CVE-2020-6514 · Exploit
• 🔥 https://github.com/HassanAzze/CVE-2020-6514 · Exploit
• 🔥 https://github.com/rojhack/CVE-2020-6514 · Exploit
• 🔥❌ https://github.com/marcinguy/CVE-2020-15999 · Exploit, Deleted
• https://nvd.nist.gov/vuln/detail/CVE-2020-12408 · Security Note
• https://ubuntu.com/security/CVE-2020-12408 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12408 · Security Note
• https://ubuntu.com/security/CVE-2020-12410 · Vendor Advisory
• https://mozilla.org/en-US/security/advisories/mfsa2020-20/#CVE-2020-12408 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2020-12408 · Vendor Advisory