PT-2020-5916 · Mozilla+6 · Firefox+8

Icewall + 1 · Published 2020-06-02 · Updated 2024-12-12 · CVE-2020-12405

Positive Technologies (AI Summary)

CVSS v2.0

5.4

Medium

Base vector

AV:N/AC:H/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions: Firefox versions prior to 77 Firefox ESR versions prior to 68.9.0 Thunderbird versions prior to 68.9.0

Description: The issue is related to a race condition in the SharedWorkerService component, which could lead to a potentially exploitable crash when browsing a malicious page. This could allow a remote attacker to cause a denial of service.

Recommendations: For Firefox versions prior to 77, update to version 77 or later to resolve the issue. For Firefox ESR versions prior to 68.9.0, update to version 68.9.0 or later to resolve the issue. For Thunderbird versions prior to 68.9.0, update to version 68.9.0 or later to resolve the issue.

Exploit

Fix

Race Condition

Use After Free

Weakness Enumeration

CWE-362

CWE-416

Related Identifiers

ALT-PU-2020-2084

ALT-PU-2020-2092

ALT-PU-2020-2102

ALT-PU-2020-2127

ALT-PU-2020-2150

ALT-PU-2020-2408

ALT-PU-2020-2933

ALT-PU-2020-3442

ALT-PU-2021-1368

ALT-PU-2021-3368

BDU:2021-02028

CESA-2020_2378

CESA-2020_2379

CESA-2020_2381

CESA-2020_2613

CESA-2020_2614

CESA-2020_2615

CVE-2020-12405

DLA-2243-1

DLA-2247-1

DSA-4695-1

DSA-4702-1

MGASA-2020-0300

OPENSUSE-SU-2020:0789-1

OPENSUSE-SU-2020:0799-1

OPENSUSE-SU-2020_0789-1

OPENSUSE-SU-2020_0799-1

OPENSUSE-SU-2024:10600-1

OPENSUSE-SU-2024:10601-1

OPENSUSE-SU-2024:14572-1

RHSA-2020:2378

RHSA-2020:2379

RHSA-2020:2380

RHSA-2020:2381

RHSA-2020:2382

RHSA-2020:2611

RHSA-2020:2613

RHSA-2020:2614

RHSA-2020:2615

RHSA-2020:2616

RHSA-2020_2378

RHSA-2020_2379

RHSA-2020_2381

RHSA-2020_2613

RHSA-2020_2614

RHSA-2020_2615

SUSE-SU-2020:14389-1

SUSE-SU-2020:1556-1

SUSE-SU-2020:1563-1

SUSE-SU-2020:1591-1

SUSE-SU-2020:1591-2

SUSE-SU-2020_14389-1

SUSE-SU-2020_1556-1

SUSE-SU-2020_1563-1

USN-4383-1

USN-4421-1

Affected Products

Alt Linux

Centos

Firefox

Firefox Esr

Linuxmint

Red Hat

Suse

Thunderbird

Ubuntu

References · 2033

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/firefox_jit_use_after_free.rb · Exploit
• 🔥 https://github.com/maxpl0it/CVE-2019-17026-Exploit · Exploit
• 🔥 https://github.com/aleksejspopovs/cve-2020-16012 · Exploit
• 🔥 https://github.com/lsw29475/CVE-2019-17026 · Exploit
• 🔥 https://github.com/R0jhack/CVE-2020-6514 · Exploit
• 🔥 https://github.com/hasan-khalil/CVE-2020-6514 · Exploit
• 🔥 https://github.com/HassanAzze/CVE-2020-6514 · Exploit
• 🔥 https://github.com/rojhack/CVE-2020-6514 · Exploit
• 🔥 https://bugzilla.mozilla.org/show_bug.cgi?id=1631618 · Exploit
• 🔥❌ https://github.com/marcinguy/CVE-2020-15999 · Exploit, Deleted
• https://mozilla.org/security/advisories/mfsa2020-21 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:10601-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2020-12408 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2020-12405 · Vendor Advisory
• https://ubuntu.com/security/CVE-2020-12410 · Vendor Advisory