Mozilla developers and community members reported memory safety bugs present in Firefox 78 and Firefox ESR 78.0. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 79, Firefox ESR < 68.11, Firefox ESR < 78.1, Thunderbird < 68.11, and Thunderbird < 78.1.
References
| Link | Resource |
|---|---|
| https://www.mozilla.org/security/advisories/mfsa2020-31/ | Vendor Advisory |
| https://www.mozilla.org/security/advisories/mfsa2020-32/ | Vendor Advisory |
| https://www.mozilla.org/security/advisories/mfsa2020-30/ | Vendor Advisory |
| https://www.mozilla.org/security/advisories/mfsa2020-35/ | Vendor Advisory |
| https://www.mozilla.org/security/advisories/mfsa2020-33/ | Vendor Advisory |
| https://bugzilla.mozilla.org/buglist.cgi?bug_id=1550133%2C1633880%2C1643613%2C1644839%2C1645835%2C1646006%2C1646787%2C1649347%2C1650811%2C1651678 | Issue Tracking Permissions Required Vendor Advisory |
| http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00022.html | Mailing List Patch Third Party Advisory |
| http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00025.html | Mailing List Patch Third Party Advisory |
| http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00032.html | Mailing List Patch Third Party Advisory |
| https://usn.ubuntu.com/4443-1/ | Patch Third Party Advisory |
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
History
No history.
Information
Published : 2020-08-10 18:15
Updated : 2020-08-21 18:21
NVD link : CVE-2020-15659
Mitre link : CVE-2020-15659
JSON object : View
Products Affected
canonical
- ubuntu_linux
opensuse
- leap
mozilla
- thunderbird
- firefox_esr
- firefox
CWE
CWE-787
Out-of-bounds Write