CVSS: 9.8EPSS: 0%CPEs: 3EXPL: 0CVE-2020-6825 – Mozilla: Memory safety bugs fixed in Firefox 75 and Firefox ESR 68.7
https://notcve.org/view.php?id=CVE-2020-6825
Mozilla developers and community members Tyson Smith and Christian Holler reported memory safety bugs present in Firefox 74 and Firefox ESR 68.6. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Thunderbird < 68.7.0, Firefox ESR < 68.7, and Firefox < 75. Los desarrolladores y los miembros de la comunidad de Mozilla Tyson Smith y Christian Holler reportaron bugs de seguridad de memoria presentes en Firefox versión 74 y Firefox ESR versión 68.6. Algunos de estos bugs mostraron evidencia de corrupción de memoria y presumimos que con suficiente esfuerzo algunos de estos podrían haber sido explotados para ejecutar código arbitrario. • https://bugzilla.mozilla.org/buglist.cgi?bug_id=1572541%2C1620193%2C1620203 https://usn.ubuntu.com/4335-1 https://www.mozilla.org/security/advisories/mfsa2020-12 https://www.mozilla.org/security/advisories/mfsa2020-13 https://www.mozilla.org/security/advisories/mfsa2020-14 https://access.redhat.com/security/cve/CVE-2020-6825 https://bugzilla.redhat.com/show_bug.cgi?id=1821682 • CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') CWE-787: Out-of-bounds Write •
CVSS: 9.8EPSS: 0%CPEs: 1EXPL: 0CVE-2020-6823
https://notcve.org/view.php?id=CVE-2020-6823
A malicious extension could have called <code>browser.identity.launchWebAuthFlow</code>, controlling the redirect_uri, and through the Promise returned, obtain the Auth code and gain access to the user's account at the service provider. This vulnerability affects Firefox < 75. Una extensión maliciosa podría haber llamado (code)browser.identity.launchWebAuthFlow(/code), controlando el redirect_uri y, por medio de la Promesa devuelta, obtenga el código de Autenticación y consiga acceso a la cuenta del usuario en el proveedor de servicios. Esta vulnerabilidad afecta a Firefox versiones anteriores a 75. • https://bugzilla.mozilla.org/show_bug.cgi?id=1614919 https://www.mozilla.org/security/advisories/mfsa2020-12 • CWE-862: Missing Authorization •
CVSS: 8.8EPSS: 0%CPEs: 3EXPL: 0CVE-2020-6820 – Mozilla Firefox And Thunderbird Use-After-Free Vulnerability
https://notcve.org/view.php?id=CVE-2020-6820
Under certain conditions, when handling a ReadableStream, a race condition can cause a use-after-free. We are aware of targeted attacks in the wild abusing this flaw. This vulnerability affects Thunderbird < 68.7.0, Firefox < 74.0.1, and Firefox ESR < 68.6.1. Bajo determinadas condiciones, cuando se maneja un ReadableStream, una condición de carrera puede causar un uso de la memoria previamente liberada. Somos conscientes de los ataques dirigidos "in the wild" que abusan de este fallo. • https://bugzilla.mozilla.org/show_bug.cgi?id=1626728 https://usn.ubuntu.com/4335-1 https://www.mozilla.org/security/advisories/mfsa2020-11 https://www.mozilla.org/security/advisories/mfsa2020-14 https://access.redhat.com/security/cve/CVE-2020-6820 https://bugzilla.redhat.com/show_bug.cgi?id=1820878 • CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') CWE-416: Use After Free •
CVSS: 8.8EPSS: 3%CPEs: 3EXPL: 1CVE-2020-6819 – Mozilla Firefox And Thunderbird Use-After-Free Vulnerability
https://notcve.org/view.php?id=CVE-2020-6819
Under certain conditions, when running the nsDocShell destructor, a race condition can cause a use-after-free. We are aware of targeted attacks in the wild abusing this flaw. This vulnerability affects Thunderbird < 68.7.0, Firefox < 74.0.1, and Firefox ESR < 68.6.1. Bajo determinadas condiciones, cuando se ejecuta el destructor nsDocShell, una condición de carrera puede causar un uso de la memoria previamente liberada. Somos conscientes de los ataques dirigidos "in the wild" que abusan de este fallo. • https://bugzilla.mozilla.org/show_bug.cgi?id=1620818 https://usn.ubuntu.com/4335-1 https://www.mozilla.org/security/advisories/mfsa2020-11 https://www.mozilla.org/security/advisories/mfsa2020-14 https://access.redhat.com/security/cve/CVE-2020-6819 https://bugzilla.redhat.com/show_bug.cgi?id=1820869 • CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') CWE-416: Use After Free •
CVSS: 5.3EPSS: 0%CPEs: 1EXPL: 0CVE-2020-6813
https://notcve.org/view.php?id=CVE-2020-6813
When protecting CSS blocks with the nonce feature of Content Security Policy, the @import statement in the CSS block could allow an attacker to inject arbitrary styles, bypassing the intent of the Content Security Policy. This vulnerability affects Firefox < 74. Cuando se protegen los bloques CSS con la funcionalidad nonce de la Content Security Policy, la sentencia @import en el bloque CSS podría permitir a un atacante inyectar estilos arbitrarios, omitiendo la intención de la Content Security Policy. Esta vulnerabilidad afecta a Firefox versiones anteriores a 74. • https://bugzilla.mozilla.org/show_bug.cgi?id=1605814 https://www.mozilla.org/security/advisories/mfsa2020-08 •