CVE-2020-15673

Mozilla developers reported memory safety bugs present in Firefox 80 and Firefox ESR 78.2. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 81, Thunderbird < 78.3, and Firefox ESR < 78.3.

Link	Resource
https://www.mozilla.org/security/advisories/mfsa2020-42/	Release Notes Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2020-43/	Release Notes Vendor Advisory
https://bugzilla.mozilla.org/buglist.cgi?bug_id=1648493%2C1660800	Broken Link Issue Tracking
https://www.mozilla.org/security/advisories/mfsa2020-44/	Release Notes Vendor Advisory
https://www.debian.org/security/2020/dsa-4770	Third Party Advisory
https://lists.debian.org/debian-lts-announce/2020/10/msg00020.html	Mailing List Third Party Advisory
https://security.gentoo.org/glsa/202010-02	Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00077.html	Mailing List Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00074.html	Mailing List Third Party Advisory

Configuration 1

cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:* cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:* cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:* cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:* cpe:2.3:o:opensuse:leap:15.2:*:*:*:*:*:*:*

---

Published : 2020-10-01 07:15

Updated : 2022-04-28 06:22

---

NVD link : CVE-2020-15673

Mitre link : CVE-2020-15673

No products.

CWE-416