PT-2020-14576 · Mozilla+1 · Firefox+1

Crixer · Published 2020-08-25 · Updated 2024-12-12 · CVE-2020-15667

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 80

Description A heap overflow could occur when processing a MAR update file after the signature has been validated, due to an invalid name length. This could lead to memory corruption and potentially arbitrary code execution. The issue is only exploitable with the Mozilla-controlled signing key in Firefox as released by Mozilla.

Recommendations For versions prior to 80, update to version 80 or later to resolve the issue.

Exploit

Fix

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

ALT-PU-2020-2706

ALT-PU-2020-3442

ALT-PU-2021-2725

ALT-PU-2021-2881

ALT-PU-2021-3368

ALT-PU-2021-3369

ALT-PU-2022-1781

CVE-2020-15667

OPENSUSE-SU-2024:10600-1

OPENSUSE-SU-2024:14572-1

Affected Products

Alt Linux

Firefox

References · 1881

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/firefox_jit_use_after_free.rb · Exploit
• 🔥 https://github.com/mistymntncop/CVE-2022-26485 · Exploit
• 🔥 https://github.com/aleksejspopovs/cve-2020-16012 · Exploit
• 🔥 https://github.com/R0jhack/CVE-2020-6514 · Exploit
• 🔥 https://github.com/hasan-khalil/CVE-2020-6514 · Exploit
• 🔥 https://github.com/HassanAzze/CVE-2020-6514 · Exploit
• 🔥 https://github.com/rojhack/CVE-2020-6514 · Exploit
• 🔥❌ https://github.com/marcinguy/CVE-2020-15999 · Exploit, Deleted
• https://nvd.nist.gov/vuln/detail/CVE-2020-15667 · Security Note
• https://bugzilla.mozilla.org/show_bug.cgi?id=1653371 · Vendor Advisory
• https://mozilla.org/en-US/security/advisories/mfsa2020-36/#CVE-2020-15667 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15667 · Security Note
• https://mozilla.org/en-US/security/advisories/mfsa2020-36 · Vendor Advisory
• https://mozilla.org/security/advisories/mfsa2020-36 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2020-15667 · Vendor Advisory