PT-2020-20726 · Maelstrom · Pale Moon

Smoki · Published 2020-03-02 · Updated 2022-01-01 · CVE-2020-9545

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Pale Moon versions 28.x through 28.8.3 Pale Moon versions 28.8.x before 28.8.4

Description The issue is related to a segmentation fault in the module scripting component. This has been demonstrated by a specific web site, Lacoste.

Recommendations For Pale Moon versions 28.x through 28.8.3, update to version 28.8.4 or later. For Pale Moon versions 28.8.x before 28.8.4, update to version 28.8.4 or later.

Fix

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

CVE-2020-9545

Affected Products

Pale Moon

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2020-9545 · Security Note
• http://palemoon.org/releasenotes.shtml · Vendor Advisory
• https://forum.palemoon.org/viewtopic.php?f=37&t=23864 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-9545 · Vendor Advisory
• https://t.me/cvenotify/1308 · Telegram Post