PT-2020-5312 · Mozilla+6 · Firefox+8

Karl Tomlinson + 1 · Published 2020-05-10 · Updated 2024-06-15 · CVE-2020-12410

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 77 Firefox ESR versions prior to 68.9 Thunderbird versions prior to 68.9.0

Description The issue is related to memory safety bugs and a buffer data boundary operation error. These bugs can lead to memory corruption, potentially allowing an attacker to run arbitrary code. The vulnerability may also enable a remote attacker to access confidential data, compromise data integrity, and cause a denial of service.

Recommendations For Firefox versions prior to 77, update to version 77 or later. For Firefox ESR versions prior to 68.9, update to version 68.9 or later. For Thunderbird versions prior to 68.9.0, update to version 68.9.0 or later.

Exploit

Fix

Buffer Overflow

Memory Corruption

Weakness Enumeration

CWE-119

CWE-787

Related Identifiers

ALT-PU-2020-1943

ALT-PU-2020-2084

ALT-PU-2020-2092

ALT-PU-2020-2102

ALT-PU-2020-2127

ALT-PU-2020-2150

ALT-PU-2020-2408

ALT-PU-2020-2933

ALT-PU-2020-3442

ALT-PU-2021-1368

ALT-PU-2021-3368

BDU:2021-00078

CESA-2020_2378

CESA-2020_2379

CESA-2020_2381

CESA-2020_2613

CESA-2020_2614

CESA-2020_2615

CVE-2020-12410

DLA-2243-1

DLA-2247-1

DSA-4695-1

DSA-4702-1

MGASA-2020-0300

OPENSUSE-SU-2020:0789-1

OPENSUSE-SU-2020:0799-1

OPENSUSE-SU-2020_0789-1

OPENSUSE-SU-2020_0799-1

OPENSUSE-SU-2024:10601-1

RHSA-2020:2378

RHSA-2020:2379

RHSA-2020:2380

RHSA-2020:2381

RHSA-2020:2382

RHSA-2020:2611

RHSA-2020:2613

RHSA-2020:2614

RHSA-2020:2615

RHSA-2020:2616

RHSA-2020_2378

RHSA-2020_2379

RHSA-2020_2381

RHSA-2020_2613

RHSA-2020_2614

RHSA-2020_2615

SUSE-SU-2020:14389-1

SUSE-SU-2020:1556-1

SUSE-SU-2020:1563-1

SUSE-SU-2020:1591-1

SUSE-SU-2020:1591-2

SUSE-SU-2020_1556-1

SUSE-SU-2020_1563-1

USN-4383-1

USN-4421-1

Affected Products

Alt Linux

Centos

Firefox

Firefox Esr

Linuxmint

Red Hat

Suse

Thunderbird

Ubuntu

References · 476

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/firefox_jit_use_after_free.rb · Exploit
• 🔥 https://github.com/maxpl0it/CVE-2019-17026-Exploit · Exploit
• 🔥 https://github.com/aleksejspopovs/cve-2020-16012 · Exploit
• 🔥 https://github.com/lsw29475/CVE-2019-17026 · Exploit
• 🔥 https://github.com/hasan-khalil/CVE-2020-6514 · Exploit
• 🔥 https://github.com/HassanAzze/CVE-2020-6514 · Exploit
• 🔥 https://github.com/R0jhack/CVE-2020-6514 · Exploit
• 🔥 https://github.com/rojhack/CVE-2020-6514 · Exploit
• 🔥❌ https://github.com/marcinguy/CVE-2020-15999 · Exploit, Deleted
• https://security-tracker.debian.org/tracker/CVE-2020-12410 · Vendor Advisory
• https://osv.dev/vulnerability/USN-4421-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2020:0799-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2020:1591-1 · Vendor Advisory
• https://osv.dev/vulnerability/DSA-4695-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2020:1591-2 · Vendor Advisory