csaf_redhat - rhsa-2020

rhsa-2020_4158

Vulnerability from csaf_redhat

Published

2020-10-01 13:32

Modified

2024-11-05 22:48

Summary

Red Hat Security Advisory: thunderbird security update

Notes

Topic

An update for thunderbird is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Details

Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 78.3.1. Security Fix(es): * Mozilla: Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3 (CVE-2020-15673) * Mozilla: XSS when pasting attacker-controlled data into a contenteditable element (CVE-2020-15676) * Mozilla: Download origin spoofing via redirect (CVE-2020-15677) * Mozilla: When recursing through layers while scrolling, an iterator may have become invalid, resulting in a potential use-after-free scenario (CVE-2020-15678) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for thunderbird is now available for Red Hat Enterprise Linux 6.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Mozilla Thunderbird is a standalone mail and newsgroup client.\n\nThis update upgrades Thunderbird to version 78.3.1.\n\nSecurity Fix(es):\n\n* Mozilla: Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3 (CVE-2020-15673)\n\n* Mozilla: XSS when pasting attacker-controlled data into a contenteditable element (CVE-2020-15676)\n\n* Mozilla: Download origin spoofing via redirect (CVE-2020-15677)\n\n* Mozilla: When recursing through layers while scrolling, an iterator may have become invalid, resulting in a potential use-after-free scenario (CVE-2020-15678)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2020:4158",
        "url": "https://access.redhat.com/errata/RHSA-2020:4158"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "1881664",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1881664"
      },
      {
        "category": "external",
        "summary": "1881665",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1881665"
      },
      {
        "category": "external",
        "summary": "1881666",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1881666"
      },
      {
        "category": "external",
        "summary": "1881667",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1881667"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_4158.json"
      }
    ],
    "title": "Red Hat Security Advisory: thunderbird security update",
    "tracking": {
      "current_release_date": "2024-11-05T22:48:31+00:00",
      "generator": {
        "date": "2024-11-05T22:48:31+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.1.1"
        }
      },
      "id": "RHSA-2020:4158",
      "initial_release_date": "2020-10-01T13:32:16+00:00",
      "revision_history": [
        {
          "date": "2020-10-01T13:32:16+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2020-10-01T13:32:16+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-11-05T22:48:31+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Desktop (v. 6)",
                "product": {
                  "name": "Red Hat Enterprise Linux Desktop (v. 6)",
                  "product_id": "6Client-6.10.z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:6::client"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Server Optional (v. 6)",
                "product": {
                  "name": "Red Hat Enterprise Linux Server Optional (v. 6)",
                  "product_id": "6Server-optional-6.10.z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:6::server"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Workstation (v. 6)",
                "product": {
                  "name": "Red Hat Enterprise Linux Workstation (v. 6)",
                  "product_id": "6Workstation-6.10.z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:6::workstation"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "thunderbird-0:78.3.1-1.el6_10.i686",
                "product": {
                  "name": "thunderbird-0:78.3.1-1.el6_10.i686",
                  "product_id": "thunderbird-0:78.3.1-1.el6_10.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird@78.3.1-1.el6_10?arch=i686"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i686"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "thunderbird-0:78.3.1-1.el6_10.x86_64",
                "product": {
                  "name": "thunderbird-0:78.3.1-1.el6_10.x86_64",
                  "product_id": "thunderbird-0:78.3.1-1.el6_10.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird@78.3.1-1.el6_10?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "thunderbird-debuginfo-0:78.3.1-1.el6_10.x86_64",
                "product": {
                  "name": "thunderbird-debuginfo-0:78.3.1-1.el6_10.x86_64",
                  "product_id": "thunderbird-debuginfo-0:78.3.1-1.el6_10.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird-debuginfo@78.3.1-1.el6_10?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "thunderbird-0:78.3.1-1.el6_10.src",
                "product": {
                  "name": "thunderbird-0:78.3.1-1.el6_10.src",
                  "product_id": "thunderbird-0:78.3.1-1.el6_10.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird@78.3.1-1.el6_10?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "thunderbird-0:78.3.1-1.el6_10.ppc64",
                "product": {
                  "name": "thunderbird-0:78.3.1-1.el6_10.ppc64",
                  "product_id": "thunderbird-0:78.3.1-1.el6_10.ppc64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird@78.3.1-1.el6_10?arch=ppc64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "thunderbird-debuginfo-0:78.3.1-1.el6_10.ppc64",
                "product": {
                  "name": "thunderbird-debuginfo-0:78.3.1-1.el6_10.ppc64",
                  "product_id": "thunderbird-debuginfo-0:78.3.1-1.el6_10.ppc64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird-debuginfo@78.3.1-1.el6_10?arch=ppc64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "thunderbird-0:78.3.1-1.el6_10.s390x",
                "product": {
                  "name": "thunderbird-0:78.3.1-1.el6_10.s390x",
                  "product_id": "thunderbird-0:78.3.1-1.el6_10.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird@78.3.1-1.el6_10?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "thunderbird-debuginfo-0:78.3.1-1.el6_10.s390x",
                "product": {
                  "name": "thunderbird-debuginfo-0:78.3.1-1.el6_10.s390x",
                  "product_id": "thunderbird-debuginfo-0:78.3.1-1.el6_10.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird-debuginfo@78.3.1-1.el6_10?arch=s390x"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:78.3.1-1.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.10.z:thunderbird-0:78.3.1-1.el6_10.i686"
        },
        "product_reference": "thunderbird-0:78.3.1-1.el6_10.i686",
        "relates_to_product_reference": "6Client-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:78.3.1-1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.10.z:thunderbird-0:78.3.1-1.el6_10.ppc64"
        },
        "product_reference": "thunderbird-0:78.3.1-1.el6_10.ppc64",
        "relates_to_product_reference": "6Client-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:78.3.1-1.el6_10.s390x as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.10.z:thunderbird-0:78.3.1-1.el6_10.s390x"
        },
        "product_reference": "thunderbird-0:78.3.1-1.el6_10.s390x",
        "relates_to_product_reference": "6Client-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:78.3.1-1.el6_10.src as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.10.z:thunderbird-0:78.3.1-1.el6_10.src"
        },
        "product_reference": "thunderbird-0:78.3.1-1.el6_10.src",
        "relates_to_product_reference": "6Client-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:78.3.1-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.10.z:thunderbird-0:78.3.1-1.el6_10.x86_64"
        },
        "product_reference": "thunderbird-0:78.3.1-1.el6_10.x86_64",
        "relates_to_product_reference": "6Client-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:78.3.1-1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.10.z:thunderbird-debuginfo-0:78.3.1-1.el6_10.ppc64"
        },
        "product_reference": "thunderbird-debuginfo-0:78.3.1-1.el6_10.ppc64",
        "relates_to_product_reference": "6Client-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:78.3.1-1.el6_10.s390x as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.10.z:thunderbird-debuginfo-0:78.3.1-1.el6_10.s390x"
        },
        "product_reference": "thunderbird-debuginfo-0:78.3.1-1.el6_10.s390x",
        "relates_to_product_reference": "6Client-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:78.3.1-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.10.z:thunderbird-debuginfo-0:78.3.1-1.el6_10.x86_64"
        },
        "product_reference": "thunderbird-debuginfo-0:78.3.1-1.el6_10.x86_64",
        "relates_to_product_reference": "6Client-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:78.3.1-1.el6_10.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
          "product_id": "6Server-optional-6.10.z:thunderbird-0:78.3.1-1.el6_10.i686"
        },
        "product_reference": "thunderbird-0:78.3.1-1.el6_10.i686",
        "relates_to_product_reference": "6Server-optional-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:78.3.1-1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
          "product_id": "6Server-optional-6.10.z:thunderbird-0:78.3.1-1.el6_10.ppc64"
        },
        "product_reference": "thunderbird-0:78.3.1-1.el6_10.ppc64",
        "relates_to_product_reference": "6Server-optional-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:78.3.1-1.el6_10.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
          "product_id": "6Server-optional-6.10.z:thunderbird-0:78.3.1-1.el6_10.s390x"
        },
        "product_reference": "thunderbird-0:78.3.1-1.el6_10.s390x",
        "relates_to_product_reference": "6Server-optional-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:78.3.1-1.el6_10.src as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
          "product_id": "6Server-optional-6.10.z:thunderbird-0:78.3.1-1.el6_10.src"
        },
        "product_reference": "thunderbird-0:78.3.1-1.el6_10.src",
        "relates_to_product_reference": "6Server-optional-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:78.3.1-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
          "product_id": "6Server-optional-6.10.z:thunderbird-0:78.3.1-1.el6_10.x86_64"
        },
        "product_reference": "thunderbird-0:78.3.1-1.el6_10.x86_64",
        "relates_to_product_reference": "6Server-optional-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:78.3.1-1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
          "product_id": "6Server-optional-6.10.z:thunderbird-debuginfo-0:78.3.1-1.el6_10.ppc64"
        },
        "product_reference": "thunderbird-debuginfo-0:78.3.1-1.el6_10.ppc64",
        "relates_to_product_reference": "6Server-optional-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:78.3.1-1.el6_10.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
          "product_id": "6Server-optional-6.10.z:thunderbird-debuginfo-0:78.3.1-1.el6_10.s390x"
        },
        "product_reference": "thunderbird-debuginfo-0:78.3.1-1.el6_10.s390x",
        "relates_to_product_reference": "6Server-optional-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:78.3.1-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
          "product_id": "6Server-optional-6.10.z:thunderbird-debuginfo-0:78.3.1-1.el6_10.x86_64"
        },
        "product_reference": "thunderbird-debuginfo-0:78.3.1-1.el6_10.x86_64",
        "relates_to_product_reference": "6Server-optional-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:78.3.1-1.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.10.z:thunderbird-0:78.3.1-1.el6_10.i686"
        },
        "product_reference": "thunderbird-0:78.3.1-1.el6_10.i686",
        "relates_to_product_reference": "6Workstation-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:78.3.1-1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.10.z:thunderbird-0:78.3.1-1.el6_10.ppc64"
        },
        "product_reference": "thunderbird-0:78.3.1-1.el6_10.ppc64",
        "relates_to_product_reference": "6Workstation-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:78.3.1-1.el6_10.s390x as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.10.z:thunderbird-0:78.3.1-1.el6_10.s390x"
        },
        "product_reference": "thunderbird-0:78.3.1-1.el6_10.s390x",
        "relates_to_product_reference": "6Workstation-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:78.3.1-1.el6_10.src as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.10.z:thunderbird-0:78.3.1-1.el6_10.src"
        },
        "product_reference": "thunderbird-0:78.3.1-1.el6_10.src",
        "relates_to_product_reference": "6Workstation-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:78.3.1-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.10.z:thunderbird-0:78.3.1-1.el6_10.x86_64"
        },
        "product_reference": "thunderbird-0:78.3.1-1.el6_10.x86_64",
        "relates_to_product_reference": "6Workstation-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:78.3.1-1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.10.z:thunderbird-debuginfo-0:78.3.1-1.el6_10.ppc64"
        },
        "product_reference": "thunderbird-debuginfo-0:78.3.1-1.el6_10.ppc64",
        "relates_to_product_reference": "6Workstation-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:78.3.1-1.el6_10.s390x as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.10.z:thunderbird-debuginfo-0:78.3.1-1.el6_10.s390x"
        },
        "product_reference": "thunderbird-debuginfo-0:78.3.1-1.el6_10.s390x",
        "relates_to_product_reference": "6Workstation-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:78.3.1-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.10.z:thunderbird-debuginfo-0:78.3.1-1.el6_10.x86_64"
        },
        "product_reference": "thunderbird-debuginfo-0:78.3.1-1.el6_10.x86_64",
        "relates_to_product_reference": "6Workstation-6.10.z"
      }
    ]
  },
  "vulnerabilities": [
    {
      "acknowledgments": [
        {
          "names": [
            "the Mozilla project"
          ]
        },
        {
          "names": [
            "Jason Kratzer"
          ],
          "summary": "Acknowledged by upstream."
        }
      ],
      "cve": "CVE-2020-15673",
      "cwe": {
        "id": "CWE-120",
        "name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
      },
      "discovery_date": "2020-09-22T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1881667"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nMozilla developer reported memory safety bugs present in Firefox 80 and Firefox ESR 78.2. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla: Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-6.10.z:thunderbird-0:78.3.1-1.el6_10.i686",
          "6Client-6.10.z:thunderbird-0:78.3.1-1.el6_10.ppc64",
          "6Client-6.10.z:thunderbird-0:78.3.1-1.el6_10.s390x",
          "6Client-6.10.z:thunderbird-0:78.3.1-1.el6_10.src",
          "6Client-6.10.z:thunderbird-0:78.3.1-1.el6_10.x86_64",
          "6Client-6.10.z:thunderbird-debuginfo-0:78.3.1-1.el6_10.ppc64",
          "6Client-6.10.z:thunderbird-debuginfo-0:78.3.1-1.el6_10.s390x",
          "6Client-6.10.z:thunderbird-debuginfo-0:78.3.1-1.el6_10.x86_64",
          "6Server-optional-6.10.z:thunderbird-0:78.3.1-1.el6_10.i686",
          "6Server-optional-6.10.z:thunderbird-0:78.3.1-1.el6_10.ppc64",
          "6Server-optional-6.10.z:thunderbird-0:78.3.1-1.el6_10.s390x",
          "6Server-optional-6.10.z:thunderbird-0:78.3.1-1.el6_10.src",
          "6Server-optional-6.10.z:thunderbird-0:78.3.1-1.el6_10.x86_64",
          "6Server-optional-6.10.z:thunderbird-debuginfo-0:78.3.1-1.el6_10.ppc64",
          "6Server-optional-6.10.z:thunderbird-debuginfo-0:78.3.1-1.el6_10.s390x",
          "6Server-optional-6.10.z:thunderbird-debuginfo-0:78.3.1-1.el6_10.x86_64",
          "6Workstation-6.10.z:thunderbird-0:78.3.1-1.el6_10.i686",
          "6Workstation-6.10.z:thunderbird-0:78.3.1-1.el6_10.ppc64",
          "6Workstation-6.10.z:thunderbird-0:78.3.1-1.el6_10.s390x",
          "6Workstation-6.10.z:thunderbird-0:78.3.1-1.el6_10.src",
          "6Workstation-6.10.z:thunderbird-0:78.3.1-1.el6_10.x86_64",
          "6Workstation-6.10.z:thunderbird-debuginfo-0:78.3.1-1.el6_10.ppc64",
          "6Workstation-6.10.z:thunderbird-debuginfo-0:78.3.1-1.el6_10.s390x",
          "6Workstation-6.10.z:thunderbird-debuginfo-0:78.3.1-1.el6_10.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2020-15673"
        },
        {
          "category": "external",
          "summary": "RHBZ#1881667",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1881667"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2020-15673",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-15673"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-15673",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-15673"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2020-43/#CVE-2020-15673",
          "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2020-43/#CVE-2020-15673"
        }
      ],
      "release_date": "2020-09-22T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-10-01T13:32:16+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.",
          "product_ids": [
            "6Client-6.10.z:thunderbird-0:78.3.1-1.el6_10.i686",
            "6Client-6.10.z:thunderbird-0:78.3.1-1.el6_10.ppc64",
            "6Client-6.10.z:thunderbird-0:78.3.1-1.el6_10.s390x",
            "6Client-6.10.z:thunderbird-0:78.3.1-1.el6_10.src",
            "6Client-6.10.z:thunderbird-0:78.3.1-1.el6_10.x86_64",
            "6Client-6.10.z:thunderbird-debuginfo-0:78.3.1-1.el6_10.ppc64",
            "6Client-6.10.z:thunderbird-debuginfo-0:78.3.1-1.el6_10.s390x",
            "6Client-6.10.z:thunderbird-debuginfo-0:78.3.1-1.el6_10.x86_64",
            "6Server-optional-6.10.z:thunderbird-0:78.3.1-1.el6_10.i686",
            "6Server-optional-6.10.z:thunderbird-0:78.3.1-1.el6_10.ppc64",
            "6Server-optional-6.10.z:thunderbird-0:78.3.1-1.el6_10.s390x",
            "6Server-optional-6.10.z:thunderbird-0:78.3.1-1.el6_10.src",
            "6Server-optional-6.10.z:thunderbird-0:78.3.1-1.el6_10.x86_64",
            "6Server-optional-6.10.z:thunderbird-debuginfo-0:78.3.1-1.el6_10.ppc64",
            "6Server-optional-6.10.z:thunderbird-debuginfo-0:78.3.1-1.el6_10.s390x",
            "6Server-optional-6.10.z:thunderbird-debuginfo-0:78.3.1-1.el6_10.x86_64",
            "6Workstation-6.10.z:thunderbird-0:78.3.1-1.el6_10.i686",
            "6Workstation-6.10.z:thunderbird-0:78.3.1-1.el6_10.ppc64",
            "6Workstation-6.10.z:thunderbird-0:78.3.1-1.el6_10.s390x",
            "6Workstation-6.10.z:thunderbird-0:78.3.1-1.el6_10.src",
            "6Workstation-6.10.z:thunderbird-0:78.3.1-1.el6_10.x86_64",
            "6Workstation-6.10.z:thunderbird-debuginfo-0:78.3.1-1.el6_10.ppc64",
            "6Workstation-6.10.z:thunderbird-debuginfo-0:78.3.1-1.el6_10.s390x",
            "6Workstation-6.10.z:thunderbird-debuginfo-0:78.3.1-1.el6_10.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:4158"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "6Client-6.10.z:thunderbird-0:78.3.1-1.el6_10.i686",
            "6Client-6.10.z:thunderbird-0:78.3.1-1.el6_10.ppc64",
            "6Client-6.10.z:thunderbird-0:78.3.1-1.el6_10.s390x",
            "6Client-6.10.z:thunderbird-0:78.3.1-1.el6_10.src",
            "6Client-6.10.z:thunderbird-0:78.3.1-1.el6_10.x86_64",
            "6Client-6.10.z:thunderbird-debuginfo-0:78.3.1-1.el6_10.ppc64",
            "6Client-6.10.z:thunderbird-debuginfo-0:78.3.1-1.el6_10.s390x",
            "6Client-6.10.z:thunderbird-debuginfo-0:78.3.1-1.el6_10.x86_64",
            "6Server-optional-6.10.z:thunderbird-0:78.3.1-1.el6_10.i686",
            "6Server-optional-6.10.z:thunderbird-0:78.3.1-1.el6_10.ppc64",
            "6Server-optional-6.10.z:thunderbird-0:78.3.1-1.el6_10.s390x",
            "6Server-optional-6.10.z:thunderbird-0:78.3.1-1.el6_10.src",
            "6Server-optional-6.10.z:thunderbird-0:78.3.1-1.el6_10.x86_64",
            "6Server-optional-6.10.z:thunderbird-debuginfo-0:78.3.1-1.el6_10.ppc64",
            "6Server-optional-6.10.z:thunderbird-debuginfo-0:78.3.1-1.el6_10.s390x",
            "6Server-optional-6.10.z:thunderbird-debuginfo-0:78.3.1-1.el6_10.x86_64",
            "6Workstation-6.10.z:thunderbird-0:78.3.1-1.el6_10.i686",
            "6Workstation-6.10.z:thunderbird-0:78.3.1-1.el6_10.ppc64",
            "6Workstation-6.10.z:thunderbird-0:78.3.1-1.el6_10.s390x",
            "6Workstation-6.10.z:thunderbird-0:78.3.1-1.el6_10.src",
            "6Workstation-6.10.z:thunderbird-0:78.3.1-1.el6_10.x86_64",
            "6Workstation-6.10.z:thunderbird-debuginfo-0:78.3.1-1.el6_10.ppc64",
            "6Workstation-6.10.z:thunderbird-debuginfo-0:78.3.1-1.el6_10.s390x",
            "6Workstation-6.10.z:thunderbird-debuginfo-0:78.3.1-1.el6_10.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "Mozilla: Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "the Mozilla project"
          ]
        },
        {
          "names": [
            "Daniel Fr\u00f6jdendahl"
          ],
          "summary": "Acknowledged by upstream."
        }
      ],
      "cve": "CVE-2020-15676",
      "cwe": {
        "id": "CWE-79",
        "name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
      },
      "discovery_date": "2020-09-22T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1881665"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nFirefox sometimes ran the onload handler for SVG elements that the DOM sanitizer decided to remove, resulting in JavaScript being executed after pasting attacker-controlled data into a contenteditable element.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla: XSS when pasting attacker-controlled data into a contenteditable element",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-6.10.z:thunderbird-0:78.3.1-1.el6_10.i686",
          "6Client-6.10.z:thunderbird-0:78.3.1-1.el6_10.ppc64",
          "6Client-6.10.z:thunderbird-0:78.3.1-1.el6_10.s390x",
          "6Client-6.10.z:thunderbird-0:78.3.1-1.el6_10.src",
          "6Client-6.10.z:thunderbird-0:78.3.1-1.el6_10.x86_64",
          "6Client-6.10.z:thunderbird-debuginfo-0:78.3.1-1.el6_10.ppc64",
          "6Client-6.10.z:thunderbird-debuginfo-0:78.3.1-1.el6_10.s390x",
          "6Client-6.10.z:thunderbird-debuginfo-0:78.3.1-1.el6_10.x86_64",
          "6Server-optional-6.10.z:thunderbird-0:78.3.1-1.el6_10.i686",
          "6Server-optional-6.10.z:thunderbird-0:78.3.1-1.el6_10.ppc64",
          "6Server-optional-6.10.z:thunderbird-0:78.3.1-1.el6_10.s390x",
          "6Server-optional-6.10.z:thunderbird-0:78.3.1-1.el6_10.src",
          "6Server-optional-6.10.z:thunderbird-0:78.3.1-1.el6_10.x86_64",
          "6Server-optional-6.10.z:thunderbird-debuginfo-0:78.3.1-1.el6_10.ppc64",
          "6Server-optional-6.10.z:thunderbird-debuginfo-0:78.3.1-1.el6_10.s390x",
          "6Server-optional-6.10.z:thunderbird-debuginfo-0:78.3.1-1.el6_10.x86_64",
          "6Workstation-6.10.z:thunderbird-0:78.3.1-1.el6_10.i686",
          "6Workstation-6.10.z:thunderbird-0:78.3.1-1.el6_10.ppc64",
          "6Workstation-6.10.z:thunderbird-0:78.3.1-1.el6_10.s390x",
          "6Workstation-6.10.z:thunderbird-0:78.3.1-1.el6_10.src",
          "6Workstation-6.10.z:thunderbird-0:78.3.1-1.el6_10.x86_64",
          "6Workstation-6.10.z:thunderbird-debuginfo-0:78.3.1-1.el6_10.ppc64",
          "6Workstation-6.10.z:thunderbird-debuginfo-0:78.3.1-1.el6_10.s390x",
          "6Workstation-6.10.z:thunderbird-debuginfo-0:78.3.1-1.el6_10.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2020-15676"
        },
        {
          "category": "external",
          "summary": "RHBZ#1881665",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1881665"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2020-15676",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-15676"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-15676",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-15676"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2020-43/#CVE-2020-15676",
          "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2020-43/#CVE-2020-15676"
        }
      ],
      "release_date": "2020-09-22T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-10-01T13:32:16+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.",
          "product_ids": [
            "6Client-6.10.z:thunderbird-0:78.3.1-1.el6_10.i686",
            "6Client-6.10.z:thunderbird-0:78.3.1-1.el6_10.ppc64",
            "6Client-6.10.z:thunderbird-0:78.3.1-1.el6_10.s390x",
            "6Client-6.10.z:thunderbird-0:78.3.1-1.el6_10.src",
            "6Client-6.10.z:thunderbird-0:78.3.1-1.el6_10.x86_64",
            "6Client-6.10.z:thunderbird-debuginfo-0:78.3.1-1.el6_10.ppc64",
            "6Client-6.10.z:thunderbird-debuginfo-0:78.3.1-1.el6_10.s390x",
            "6Client-6.10.z:thunderbird-debuginfo-0:78.3.1-1.el6_10.x86_64",
            "6Server-optional-6.10.z:thunderbird-0:78.3.1-1.el6_10.i686",
            "6Server-optional-6.10.z:thunderbird-0:78.3.1-1.el6_10.ppc64",
            "6Server-optional-6.10.z:thunderbird-0:78.3.1-1.el6_10.s390x",
            "6Server-optional-6.10.z:thunderbird-0:78.3.1-1.el6_10.src",
            "6Server-optional-6.10.z:thunderbird-0:78.3.1-1.el6_10.x86_64",
            "6Server-optional-6.10.z:thunderbird-debuginfo-0:78.3.1-1.el6_10.ppc64",
            "6Server-optional-6.10.z:thunderbird-debuginfo-0:78.3.1-1.el6_10.s390x",
            "6Server-optional-6.10.z:thunderbird-debuginfo-0:78.3.1-1.el6_10.x86_64",
            "6Workstation-6.10.z:thunderbird-0:78.3.1-1.el6_10.i686",
            "6Workstation-6.10.z:thunderbird-0:78.3.1-1.el6_10.ppc64",
            "6Workstation-6.10.z:thunderbird-0:78.3.1-1.el6_10.s390x",
            "6Workstation-6.10.z:thunderbird-0:78.3.1-1.el6_10.src",
            "6Workstation-6.10.z:thunderbird-0:78.3.1-1.el6_10.x86_64",
            "6Workstation-6.10.z:thunderbird-debuginfo-0:78.3.1-1.el6_10.ppc64",
            "6Workstation-6.10.z:thunderbird-debuginfo-0:78.3.1-1.el6_10.s390x",
            "6Workstation-6.10.z:thunderbird-debuginfo-0:78.3.1-1.el6_10.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:4158"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "version": "3.0"
          },
          "products": [
            "6Client-6.10.z:thunderbird-0:78.3.1-1.el6_10.i686",
            "6Client-6.10.z:thunderbird-0:78.3.1-1.el6_10.ppc64",
            "6Client-6.10.z:thunderbird-0:78.3.1-1.el6_10.s390x",
            "6Client-6.10.z:thunderbird-0:78.3.1-1.el6_10.src",
            "6Client-6.10.z:thunderbird-0:78.3.1-1.el6_10.x86_64",
            "6Client-6.10.z:thunderbird-debuginfo-0:78.3.1-1.el6_10.ppc64",
            "6Client-6.10.z:thunderbird-debuginfo-0:78.3.1-1.el6_10.s390x",
            "6Client-6.10.z:thunderbird-debuginfo-0:78.3.1-1.el6_10.x86_64",
            "6Server-optional-6.10.z:thunderbird-0:78.3.1-1.el6_10.i686",
            "6Server-optional-6.10.z:thunderbird-0:78.3.1-1.el6_10.ppc64",
            "6Server-optional-6.10.z:thunderbird-0:78.3.1-1.el6_10.s390x",
            "6Server-optional-6.10.z:thunderbird-0:78.3.1-1.el6_10.src",
            "6Server-optional-6.10.z:thunderbird-0:78.3.1-1.el6_10.x86_64",
            "6Server-optional-6.10.z:thunderbird-debuginfo-0:78.3.1-1.el6_10.ppc64",
            "6Server-optional-6.10.z:thunderbird-debuginfo-0:78.3.1-1.el6_10.s390x",
            "6Server-optional-6.10.z:thunderbird-debuginfo-0:78.3.1-1.el6_10.x86_64",
            "6Workstation-6.10.z:thunderbird-0:78.3.1-1.el6_10.i686",
            "6Workstation-6.10.z:thunderbird-0:78.3.1-1.el6_10.ppc64",
            "6Workstation-6.10.z:thunderbird-0:78.3.1-1.el6_10.s390x",
            "6Workstation-6.10.z:thunderbird-0:78.3.1-1.el6_10.src",
            "6Workstation-6.10.z:thunderbird-0:78.3.1-1.el6_10.x86_64",
            "6Workstation-6.10.z:thunderbird-debuginfo-0:78.3.1-1.el6_10.ppc64",
            "6Workstation-6.10.z:thunderbird-debuginfo-0:78.3.1-1.el6_10.s390x",
            "6Workstation-6.10.z:thunderbird-debuginfo-0:78.3.1-1.el6_10.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "Mozilla: XSS when pasting attacker-controlled data into a contenteditable element"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "the Mozilla project"
          ]
        },
        {
          "names": [
            "Richard Thomas and Tom Chothia"
          ],
          "organization": "University of Birmingham",
          "summary": "Acknowledged by upstream."
        }
      ],
      "cve": "CVE-2020-15677",
      "cwe": {
        "id": "CWE-601",
        "name": "URL Redirection to Untrusted Site (\u0027Open Redirect\u0027)"
      },
      "discovery_date": "2020-09-22T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1881664"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nBy exploiting an Open Redirect vulnerability on a website, an attacker could have spoofed the site displayed in the download file dialog to show the original site (the one suffering from the open redirect) rather than the site the file was actually downloaded from.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla: Download origin spoofing via redirect",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-6.10.z:thunderbird-0:78.3.1-1.el6_10.i686",
          "6Client-6.10.z:thunderbird-0:78.3.1-1.el6_10.ppc64",
          "6Client-6.10.z:thunderbird-0:78.3.1-1.el6_10.s390x",
          "6Client-6.10.z:thunderbird-0:78.3.1-1.el6_10.src",
          "6Client-6.10.z:thunderbird-0:78.3.1-1.el6_10.x86_64",
          "6Client-6.10.z:thunderbird-debuginfo-0:78.3.1-1.el6_10.ppc64",
          "6Client-6.10.z:thunderbird-debuginfo-0:78.3.1-1.el6_10.s390x",
          "6Client-6.10.z:thunderbird-debuginfo-0:78.3.1-1.el6_10.x86_64",
          "6Server-optional-6.10.z:thunderbird-0:78.3.1-1.el6_10.i686",
          "6Server-optional-6.10.z:thunderbird-0:78.3.1-1.el6_10.ppc64",
          "6Server-optional-6.10.z:thunderbird-0:78.3.1-1.el6_10.s390x",
          "6Server-optional-6.10.z:thunderbird-0:78.3.1-1.el6_10.src",
          "6Server-optional-6.10.z:thunderbird-0:78.3.1-1.el6_10.x86_64",
          "6Server-optional-6.10.z:thunderbird-debuginfo-0:78.3.1-1.el6_10.ppc64",
          "6Server-optional-6.10.z:thunderbird-debuginfo-0:78.3.1-1.el6_10.s390x",
          "6Server-optional-6.10.z:thunderbird-debuginfo-0:78.3.1-1.el6_10.x86_64",
          "6Workstation-6.10.z:thunderbird-0:78.3.1-1.el6_10.i686",
          "6Workstation-6.10.z:thunderbird-0:78.3.1-1.el6_10.ppc64",
          "6Workstation-6.10.z:thunderbird-0:78.3.1-1.el6_10.s390x",
          "6Workstation-6.10.z:thunderbird-0:78.3.1-1.el6_10.src",
          "6Workstation-6.10.z:thunderbird-0:78.3.1-1.el6_10.x86_64",
          "6Workstation-6.10.z:thunderbird-debuginfo-0:78.3.1-1.el6_10.ppc64",
          "6Workstation-6.10.z:thunderbird-debuginfo-0:78.3.1-1.el6_10.s390x",
          "6Workstation-6.10.z:thunderbird-debuginfo-0:78.3.1-1.el6_10.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2020-15677"
        },
        {
          "category": "external",
          "summary": "RHBZ#1881664",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1881664"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2020-15677",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-15677"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-15677",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-15677"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2020-43/#CVE-2020-15677",
          "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2020-43/#CVE-2020-15677"
        }
      ],
      "release_date": "2020-09-22T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-10-01T13:32:16+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.",
          "product_ids": [
            "6Client-6.10.z:thunderbird-0:78.3.1-1.el6_10.i686",
            "6Client-6.10.z:thunderbird-0:78.3.1-1.el6_10.ppc64",
            "6Client-6.10.z:thunderbird-0:78.3.1-1.el6_10.s390x",
            "6Client-6.10.z:thunderbird-0:78.3.1-1.el6_10.src",
            "6Client-6.10.z:thunderbird-0:78.3.1-1.el6_10.x86_64",
            "6Client-6.10.z:thunderbird-debuginfo-0:78.3.1-1.el6_10.ppc64",
            "6Client-6.10.z:thunderbird-debuginfo-0:78.3.1-1.el6_10.s390x",
            "6Client-6.10.z:thunderbird-debuginfo-0:78.3.1-1.el6_10.x86_64",
            "6Server-optional-6.10.z:thunderbird-0:78.3.1-1.el6_10.i686",
            "6Server-optional-6.10.z:thunderbird-0:78.3.1-1.el6_10.ppc64",
            "6Server-optional-6.10.z:thunderbird-0:78.3.1-1.el6_10.s390x",
            "6Server-optional-6.10.z:thunderbird-0:78.3.1-1.el6_10.src",
            "6Server-optional-6.10.z:thunderbird-0:78.3.1-1.el6_10.x86_64",
            "6Server-optional-6.10.z:thunderbird-debuginfo-0:78.3.1-1.el6_10.ppc64",
            "6Server-optional-6.10.z:thunderbird-debuginfo-0:78.3.1-1.el6_10.s390x",
            "6Server-optional-6.10.z:thunderbird-debuginfo-0:78.3.1-1.el6_10.x86_64",
            "6Workstation-6.10.z:thunderbird-0:78.3.1-1.el6_10.i686",
            "6Workstation-6.10.z:thunderbird-0:78.3.1-1.el6_10.ppc64",
            "6Workstation-6.10.z:thunderbird-0:78.3.1-1.el6_10.s390x",
            "6Workstation-6.10.z:thunderbird-0:78.3.1-1.el6_10.src",
            "6Workstation-6.10.z:thunderbird-0:78.3.1-1.el6_10.x86_64",
            "6Workstation-6.10.z:thunderbird-debuginfo-0:78.3.1-1.el6_10.ppc64",
            "6Workstation-6.10.z:thunderbird-debuginfo-0:78.3.1-1.el6_10.s390x",
            "6Workstation-6.10.z:thunderbird-debuginfo-0:78.3.1-1.el6_10.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:4158"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "version": "3.0"
          },
          "products": [
            "6Client-6.10.z:thunderbird-0:78.3.1-1.el6_10.i686",
            "6Client-6.10.z:thunderbird-0:78.3.1-1.el6_10.ppc64",
            "6Client-6.10.z:thunderbird-0:78.3.1-1.el6_10.s390x",
            "6Client-6.10.z:thunderbird-0:78.3.1-1.el6_10.src",
            "6Client-6.10.z:thunderbird-0:78.3.1-1.el6_10.x86_64",
            "6Client-6.10.z:thunderbird-debuginfo-0:78.3.1-1.el6_10.ppc64",
            "6Client-6.10.z:thunderbird-debuginfo-0:78.3.1-1.el6_10.s390x",
            "6Client-6.10.z:thunderbird-debuginfo-0:78.3.1-1.el6_10.x86_64",
            "6Server-optional-6.10.z:thunderbird-0:78.3.1-1.el6_10.i686",
            "6Server-optional-6.10.z:thunderbird-0:78.3.1-1.el6_10.ppc64",
            "6Server-optional-6.10.z:thunderbird-0:78.3.1-1.el6_10.s390x",
            "6Server-optional-6.10.z:thunderbird-0:78.3.1-1.el6_10.src",
            "6Server-optional-6.10.z:thunderbird-0:78.3.1-1.el6_10.x86_64",
            "6Server-optional-6.10.z:thunderbird-debuginfo-0:78.3.1-1.el6_10.ppc64",
            "6Server-optional-6.10.z:thunderbird-debuginfo-0:78.3.1-1.el6_10.s390x",
            "6Server-optional-6.10.z:thunderbird-debuginfo-0:78.3.1-1.el6_10.x86_64",
            "6Workstation-6.10.z:thunderbird-0:78.3.1-1.el6_10.i686",
            "6Workstation-6.10.z:thunderbird-0:78.3.1-1.el6_10.ppc64",
            "6Workstation-6.10.z:thunderbird-0:78.3.1-1.el6_10.s390x",
            "6Workstation-6.10.z:thunderbird-0:78.3.1-1.el6_10.src",
            "6Workstation-6.10.z:thunderbird-0:78.3.1-1.el6_10.x86_64",
            "6Workstation-6.10.z:thunderbird-debuginfo-0:78.3.1-1.el6_10.ppc64",
            "6Workstation-6.10.z:thunderbird-debuginfo-0:78.3.1-1.el6_10.s390x",
            "6Workstation-6.10.z:thunderbird-debuginfo-0:78.3.1-1.el6_10.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "Mozilla: Download origin spoofing via redirect"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "the Mozilla project"
          ]
        },
        {
          "names": [
            "Lukas Bernhard"
          ],
          "summary": "Acknowledged by upstream."
        }
      ],
      "cve": "CVE-2020-15678",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "discovery_date": "2020-09-22T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1881666"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The Mozilla Foundation Security Advisory describes this flaw as:\r\n\r\nWhen recursing through graphical layers while scrolling, an iterator may have become invalid, resulting in a potential use-after-free. This occurs because the function `APZCTreeManager::ComputeClippedCompositionBounds` did not follow iterator invalidation rules.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla: When recursing through layers while scrolling, an iterator may have become invalid, resulting in a potential use-after-free scenario",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-6.10.z:thunderbird-0:78.3.1-1.el6_10.i686",
          "6Client-6.10.z:thunderbird-0:78.3.1-1.el6_10.ppc64",
          "6Client-6.10.z:thunderbird-0:78.3.1-1.el6_10.s390x",
          "6Client-6.10.z:thunderbird-0:78.3.1-1.el6_10.src",
          "6Client-6.10.z:thunderbird-0:78.3.1-1.el6_10.x86_64",
          "6Client-6.10.z:thunderbird-debuginfo-0:78.3.1-1.el6_10.ppc64",
          "6Client-6.10.z:thunderbird-debuginfo-0:78.3.1-1.el6_10.s390x",
          "6Client-6.10.z:thunderbird-debuginfo-0:78.3.1-1.el6_10.x86_64",
          "6Server-optional-6.10.z:thunderbird-0:78.3.1-1.el6_10.i686",
          "6Server-optional-6.10.z:thunderbird-0:78.3.1-1.el6_10.ppc64",
          "6Server-optional-6.10.z:thunderbird-0:78.3.1-1.el6_10.s390x",
          "6Server-optional-6.10.z:thunderbird-0:78.3.1-1.el6_10.src",
          "6Server-optional-6.10.z:thunderbird-0:78.3.1-1.el6_10.x86_64",
          "6Server-optional-6.10.z:thunderbird-debuginfo-0:78.3.1-1.el6_10.ppc64",
          "6Server-optional-6.10.z:thunderbird-debuginfo-0:78.3.1-1.el6_10.s390x",
          "6Server-optional-6.10.z:thunderbird-debuginfo-0:78.3.1-1.el6_10.x86_64",
          "6Workstation-6.10.z:thunderbird-0:78.3.1-1.el6_10.i686",
          "6Workstation-6.10.z:thunderbird-0:78.3.1-1.el6_10.ppc64",
          "6Workstation-6.10.z:thunderbird-0:78.3.1-1.el6_10.s390x",
          "6Workstation-6.10.z:thunderbird-0:78.3.1-1.el6_10.src",
          "6Workstation-6.10.z:thunderbird-0:78.3.1-1.el6_10.x86_64",
          "6Workstation-6.10.z:thunderbird-debuginfo-0:78.3.1-1.el6_10.ppc64",
          "6Workstation-6.10.z:thunderbird-debuginfo-0:78.3.1-1.el6_10.s390x",
          "6Workstation-6.10.z:thunderbird-debuginfo-0:78.3.1-1.el6_10.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2020-15678"
        },
        {
          "category": "external",
          "summary": "RHBZ#1881666",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1881666"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2020-15678",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-15678"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-15678",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-15678"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2020-43/#CVE-2020-15678",
          "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2020-43/#CVE-2020-15678"
        }
      ],
      "release_date": "2020-09-22T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-10-01T13:32:16+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.",
          "product_ids": [
            "6Client-6.10.z:thunderbird-0:78.3.1-1.el6_10.i686",
            "6Client-6.10.z:thunderbird-0:78.3.1-1.el6_10.ppc64",
            "6Client-6.10.z:thunderbird-0:78.3.1-1.el6_10.s390x",
            "6Client-6.10.z:thunderbird-0:78.3.1-1.el6_10.src",
            "6Client-6.10.z:thunderbird-0:78.3.1-1.el6_10.x86_64",
            "6Client-6.10.z:thunderbird-debuginfo-0:78.3.1-1.el6_10.ppc64",
            "6Client-6.10.z:thunderbird-debuginfo-0:78.3.1-1.el6_10.s390x",
            "6Client-6.10.z:thunderbird-debuginfo-0:78.3.1-1.el6_10.x86_64",
            "6Server-optional-6.10.z:thunderbird-0:78.3.1-1.el6_10.i686",
            "6Server-optional-6.10.z:thunderbird-0:78.3.1-1.el6_10.ppc64",
            "6Server-optional-6.10.z:thunderbird-0:78.3.1-1.el6_10.s390x",
            "6Server-optional-6.10.z:thunderbird-0:78.3.1-1.el6_10.src",
            "6Server-optional-6.10.z:thunderbird-0:78.3.1-1.el6_10.x86_64",
            "6Server-optional-6.10.z:thunderbird-debuginfo-0:78.3.1-1.el6_10.ppc64",
            "6Server-optional-6.10.z:thunderbird-debuginfo-0:78.3.1-1.el6_10.s390x",
            "6Server-optional-6.10.z:thunderbird-debuginfo-0:78.3.1-1.el6_10.x86_64",
            "6Workstation-6.10.z:thunderbird-0:78.3.1-1.el6_10.i686",
            "6Workstation-6.10.z:thunderbird-0:78.3.1-1.el6_10.ppc64",
            "6Workstation-6.10.z:thunderbird-0:78.3.1-1.el6_10.s390x",
            "6Workstation-6.10.z:thunderbird-0:78.3.1-1.el6_10.src",
            "6Workstation-6.10.z:thunderbird-0:78.3.1-1.el6_10.x86_64",
            "6Workstation-6.10.z:thunderbird-debuginfo-0:78.3.1-1.el6_10.ppc64",
            "6Workstation-6.10.z:thunderbird-debuginfo-0:78.3.1-1.el6_10.s390x",
            "6Workstation-6.10.z:thunderbird-debuginfo-0:78.3.1-1.el6_10.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:4158"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "6Client-6.10.z:thunderbird-0:78.3.1-1.el6_10.i686",
            "6Client-6.10.z:thunderbird-0:78.3.1-1.el6_10.ppc64",
            "6Client-6.10.z:thunderbird-0:78.3.1-1.el6_10.s390x",
            "6Client-6.10.z:thunderbird-0:78.3.1-1.el6_10.src",
            "6Client-6.10.z:thunderbird-0:78.3.1-1.el6_10.x86_64",
            "6Client-6.10.z:thunderbird-debuginfo-0:78.3.1-1.el6_10.ppc64",
            "6Client-6.10.z:thunderbird-debuginfo-0:78.3.1-1.el6_10.s390x",
            "6Client-6.10.z:thunderbird-debuginfo-0:78.3.1-1.el6_10.x86_64",
            "6Server-optional-6.10.z:thunderbird-0:78.3.1-1.el6_10.i686",
            "6Server-optional-6.10.z:thunderbird-0:78.3.1-1.el6_10.ppc64",
            "6Server-optional-6.10.z:thunderbird-0:78.3.1-1.el6_10.s390x",
            "6Server-optional-6.10.z:thunderbird-0:78.3.1-1.el6_10.src",
            "6Server-optional-6.10.z:thunderbird-0:78.3.1-1.el6_10.x86_64",
            "6Server-optional-6.10.z:thunderbird-debuginfo-0:78.3.1-1.el6_10.ppc64",
            "6Server-optional-6.10.z:thunderbird-debuginfo-0:78.3.1-1.el6_10.s390x",
            "6Server-optional-6.10.z:thunderbird-debuginfo-0:78.3.1-1.el6_10.x86_64",
            "6Workstation-6.10.z:thunderbird-0:78.3.1-1.el6_10.i686",
            "6Workstation-6.10.z:thunderbird-0:78.3.1-1.el6_10.ppc64",
            "6Workstation-6.10.z:thunderbird-0:78.3.1-1.el6_10.s390x",
            "6Workstation-6.10.z:thunderbird-0:78.3.1-1.el6_10.src",
            "6Workstation-6.10.z:thunderbird-0:78.3.1-1.el6_10.x86_64",
            "6Workstation-6.10.z:thunderbird-debuginfo-0:78.3.1-1.el6_10.ppc64",
            "6Workstation-6.10.z:thunderbird-debuginfo-0:78.3.1-1.el6_10.s390x",
            "6Workstation-6.10.z:thunderbird-debuginfo-0:78.3.1-1.el6_10.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "Mozilla: When recursing through layers while scrolling, an iterator may have become invalid, resulting in a potential use-after-free scenario"
    }
  ]
}

cve-2020-15678

Vulnerability from cvelistv5

Published

2020-10-01 18:29

Modified

2024-08-04 13:22

Severity ?

Summary

When recursing through graphical layers while scrolling, an iterator may have become invalid, resulting in a potential use-after-free. This occurs because the function APZCTreeManager::ComputeClippedCompositionBounds did not follow iterator invalidation rules. This vulnerability affects Firefox < 81, Thunderbird < 78.3, and Firefox ESR < 78.3.

References

▼	URL	Tags
	https://www.mozilla.org/security/advisories/mfsa2020-43/	x_refsource_MISC
	https://www.mozilla.org/security/advisories/mfsa2020-44/	x_refsource_MISC
	https://www.mozilla.org/security/advisories/mfsa2020-42/	x_refsource_MISC
	https://bugzilla.mozilla.org/show_bug.cgi?id=1660211	x_refsource_MISC
	https://www.debian.org/security/2020/dsa-4770	vendor-advisory, x_refsource_DEBIAN
	https://lists.debian.org/debian-lts-announce/2020/10/msg00020.html	mailing-list, x_refsource_MLIST
	https://security.gentoo.org/glsa/202010-02	vendor-advisory, x_refsource_GENTOO
	http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00074.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00077.html	vendor-advisory, x_refsource_SUSE

Impacted products

▼	Vendor	Product
	Mozilla	Firefox
	Mozilla	Thunderbird
	Mozilla	Firefox ESR

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T13:22:30.808Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2020-43/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2020-44/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2020-42/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1660211"
          },
          {
            "name": "DSA-4770",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2020/dsa-4770"
          },
          {
            "name": "[debian-lts-announce] 20201016 [SECURITY] [DLA 2408-1] thunderbird security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2020/10/msg00020.html"
          },
          {
            "name": "GLSA-202010-02",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/202010-02"
          },
          {
            "name": "openSUSE-SU-2020:1780",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00074.html"
          },
          {
            "name": "openSUSE-SU-2020:1785",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00077.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "81",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "78.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "78.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "When recursing through graphical layers while scrolling, an iterator may have become invalid, resulting in a potential use-after-free. This occurs because the function APZCTreeManager::ComputeClippedCompositionBounds did not follow iterator invalidation rules. This vulnerability affects Firefox \u003c 81, Thunderbird \u003c 78.3, and Firefox ESR \u003c 78.3."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "When recursing through layers while scrolling, an iterator may have become invalid, resulting in a potential use-after-free scenario",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-10-31T15:06:10",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2020-43/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2020-44/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2020-42/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1660211"
        },
        {
          "name": "DSA-4770",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2020/dsa-4770"
        },
        {
          "name": "[debian-lts-announce] 20201016 [SECURITY] [DLA 2408-1] thunderbird security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2020/10/msg00020.html"
        },
        {
          "name": "GLSA-202010-02",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/202010-02"
        },
        {
          "name": "openSUSE-SU-2020:1780",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00074.html"
        },
        {
          "name": "openSUSE-SU-2020:1785",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00077.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@mozilla.org",
          "ID": "CVE-2020-15678",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Firefox",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "81"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Thunderbird",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "78.3"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Firefox ESR",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "78.3"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Mozilla"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "When recursing through graphical layers while scrolling, an iterator may have become invalid, resulting in a potential use-after-free. This occurs because the function APZCTreeManager::ComputeClippedCompositionBounds did not follow iterator invalidation rules. This vulnerability affects Firefox \u003c 81, Thunderbird \u003c 78.3, and Firefox ESR \u003c 78.3."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "When recursing through layers while scrolling, an iterator may have become invalid, resulting in a potential use-after-free scenario"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2020-43/",
              "refsource": "MISC",
              "url": "https://www.mozilla.org/security/advisories/mfsa2020-43/"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2020-44/",
              "refsource": "MISC",
              "url": "https://www.mozilla.org/security/advisories/mfsa2020-44/"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2020-42/",
              "refsource": "MISC",
              "url": "https://www.mozilla.org/security/advisories/mfsa2020-42/"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1660211",
              "refsource": "MISC",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1660211"
            },
            {
              "name": "DSA-4770",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2020/dsa-4770"
            },
            {
              "name": "[debian-lts-announce] 20201016 [SECURITY] [DLA 2408-1] thunderbird security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2020/10/msg00020.html"
            },
            {
              "name": "GLSA-202010-02",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/202010-02"
            },
            {
              "name": "openSUSE-SU-2020:1780",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00074.html"
            },
            {
              "name": "openSUSE-SU-2020:1785",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00077.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2020-15678",
    "datePublished": "2020-10-01T18:29:27",
    "dateReserved": "2020-07-10T00:00:00",
    "dateUpdated": "2024-08-04T13:22:30.808Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2020-15676

Vulnerability from cvelistv5

Published

2020-10-01 18:31

Modified

2024-08-04 13:22

Severity ?

Summary

Firefox sometimes ran the onload handler for SVG elements that the DOM sanitizer decided to remove, resulting in JavaScript being executed after pasting attacker-controlled data into a contenteditable element. This vulnerability affects Firefox < 81, Thunderbird < 78.3, and Firefox ESR < 78.3.

References

▼	URL	Tags
	https://www.mozilla.org/security/advisories/mfsa2020-43/	x_refsource_MISC
	https://www.mozilla.org/security/advisories/mfsa2020-44/	x_refsource_MISC
	https://www.mozilla.org/security/advisories/mfsa2020-42/	x_refsource_MISC
	https://bugzilla.mozilla.org/show_bug.cgi?id=1646140	x_refsource_MISC
	https://www.debian.org/security/2020/dsa-4770	vendor-advisory, x_refsource_DEBIAN
	https://lists.debian.org/debian-lts-announce/2020/10/msg00020.html	mailing-list, x_refsource_MLIST
	https://security.gentoo.org/glsa/202010-02	vendor-advisory, x_refsource_GENTOO
	http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00074.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00077.html	vendor-advisory, x_refsource_SUSE

Impacted products

▼	Vendor	Product
	Mozilla	Firefox
	Mozilla	Thunderbird
	Mozilla	Firefox ESR

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T13:22:30.645Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2020-43/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2020-44/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2020-42/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1646140"
          },
          {
            "name": "DSA-4770",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2020/dsa-4770"
          },
          {
            "name": "[debian-lts-announce] 20201016 [SECURITY] [DLA 2408-1] thunderbird security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2020/10/msg00020.html"
          },
          {
            "name": "GLSA-202010-02",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/202010-02"
          },
          {
            "name": "openSUSE-SU-2020:1780",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00074.html"
          },
          {
            "name": "openSUSE-SU-2020:1785",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00077.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "81",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "78.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "78.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Firefox sometimes ran the onload handler for SVG elements that the DOM sanitizer decided to remove, resulting in JavaScript being executed after pasting attacker-controlled data into a contenteditable element. This vulnerability affects Firefox \u003c 81, Thunderbird \u003c 78.3, and Firefox ESR \u003c 78.3."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "XSS when pasting attacker-controlled data into a contenteditable element",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-10-31T15:06:09",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2020-43/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2020-44/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2020-42/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1646140"
        },
        {
          "name": "DSA-4770",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2020/dsa-4770"
        },
        {
          "name": "[debian-lts-announce] 20201016 [SECURITY] [DLA 2408-1] thunderbird security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2020/10/msg00020.html"
        },
        {
          "name": "GLSA-202010-02",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/202010-02"
        },
        {
          "name": "openSUSE-SU-2020:1780",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00074.html"
        },
        {
          "name": "openSUSE-SU-2020:1785",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00077.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@mozilla.org",
          "ID": "CVE-2020-15676",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Firefox",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "81"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Thunderbird",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "78.3"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Firefox ESR",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "78.3"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Mozilla"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Firefox sometimes ran the onload handler for SVG elements that the DOM sanitizer decided to remove, resulting in JavaScript being executed after pasting attacker-controlled data into a contenteditable element. This vulnerability affects Firefox \u003c 81, Thunderbird \u003c 78.3, and Firefox ESR \u003c 78.3."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "XSS when pasting attacker-controlled data into a contenteditable element"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2020-43/",
              "refsource": "MISC",
              "url": "https://www.mozilla.org/security/advisories/mfsa2020-43/"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2020-44/",
              "refsource": "MISC",
              "url": "https://www.mozilla.org/security/advisories/mfsa2020-44/"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2020-42/",
              "refsource": "MISC",
              "url": "https://www.mozilla.org/security/advisories/mfsa2020-42/"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1646140",
              "refsource": "MISC",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1646140"
            },
            {
              "name": "DSA-4770",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2020/dsa-4770"
            },
            {
              "name": "[debian-lts-announce] 20201016 [SECURITY] [DLA 2408-1] thunderbird security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2020/10/msg00020.html"
            },
            {
              "name": "GLSA-202010-02",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/202010-02"
            },
            {
              "name": "openSUSE-SU-2020:1780",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00074.html"
            },
            {
              "name": "openSUSE-SU-2020:1785",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00077.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2020-15676",
    "datePublished": "2020-10-01T18:31:41",
    "dateReserved": "2020-07-10T00:00:00",
    "dateUpdated": "2024-08-04T13:22:30.645Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2020-15673

Vulnerability from cvelistv5

Published

2020-10-01 18:39

Modified

2024-08-04 13:22

Severity ?

Summary

Mozilla developers reported memory safety bugs present in Firefox 80 and Firefox ESR 78.2. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 81, Thunderbird < 78.3, and Firefox ESR < 78.3.

References

▼	URL	Tags
	https://www.mozilla.org/security/advisories/mfsa2020-43/	x_refsource_MISC
	https://www.mozilla.org/security/advisories/mfsa2020-44/	x_refsource_MISC
	https://www.mozilla.org/security/advisories/mfsa2020-42/	x_refsource_MISC
	https://bugzilla.mozilla.org/buglist.cgi?bug_id=1648493%2C1660800	x_refsource_MISC
	https://www.debian.org/security/2020/dsa-4770	vendor-advisory, x_refsource_DEBIAN
	https://lists.debian.org/debian-lts-announce/2020/10/msg00020.html	mailing-list, x_refsource_MLIST
	https://security.gentoo.org/glsa/202010-02	vendor-advisory, x_refsource_GENTOO
	http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00074.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00077.html	vendor-advisory, x_refsource_SUSE

Impacted products

▼	Vendor	Product
	Mozilla	Firefox
	Mozilla	Thunderbird
	Mozilla	Firefox ESR

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T13:22:30.827Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2020-43/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2020-44/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2020-42/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1648493%2C1660800"
          },
          {
            "name": "DSA-4770",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2020/dsa-4770"
          },
          {
            "name": "[debian-lts-announce] 20201016 [SECURITY] [DLA 2408-1] thunderbird security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2020/10/msg00020.html"
          },
          {
            "name": "GLSA-202010-02",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/202010-02"
          },
          {
            "name": "openSUSE-SU-2020:1780",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00074.html"
          },
          {
            "name": "openSUSE-SU-2020:1785",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00077.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "81",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "78.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "78.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Mozilla developers reported memory safety bugs present in Firefox 80 and Firefox ESR 78.2. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox \u003c 81, Thunderbird \u003c 78.3, and Firefox ESR \u003c 78.3."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-10-31T15:06:08",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2020-43/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2020-44/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2020-42/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1648493%2C1660800"
        },
        {
          "name": "DSA-4770",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2020/dsa-4770"
        },
        {
          "name": "[debian-lts-announce] 20201016 [SECURITY] [DLA 2408-1] thunderbird security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2020/10/msg00020.html"
        },
        {
          "name": "GLSA-202010-02",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/202010-02"
        },
        {
          "name": "openSUSE-SU-2020:1780",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00074.html"
        },
        {
          "name": "openSUSE-SU-2020:1785",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00077.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@mozilla.org",
          "ID": "CVE-2020-15673",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Firefox",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "81"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Thunderbird",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "78.3"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Firefox ESR",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "78.3"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Mozilla"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Mozilla developers reported memory safety bugs present in Firefox 80 and Firefox ESR 78.2. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox \u003c 81, Thunderbird \u003c 78.3, and Firefox ESR \u003c 78.3."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2020-43/",
              "refsource": "MISC",
              "url": "https://www.mozilla.org/security/advisories/mfsa2020-43/"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2020-44/",
              "refsource": "MISC",
              "url": "https://www.mozilla.org/security/advisories/mfsa2020-44/"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2020-42/",
              "refsource": "MISC",
              "url": "https://www.mozilla.org/security/advisories/mfsa2020-42/"
            },
            {
              "name": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1648493%2C1660800",
              "refsource": "MISC",
              "url": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1648493%2C1660800"
            },
            {
              "name": "DSA-4770",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2020/dsa-4770"
            },
            {
              "name": "[debian-lts-announce] 20201016 [SECURITY] [DLA 2408-1] thunderbird security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2020/10/msg00020.html"
            },
            {
              "name": "GLSA-202010-02",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/202010-02"
            },
            {
              "name": "openSUSE-SU-2020:1780",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00074.html"
            },
            {
              "name": "openSUSE-SU-2020:1785",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00077.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2020-15673",
    "datePublished": "2020-10-01T18:39:19",
    "dateReserved": "2020-07-10T00:00:00",
    "dateUpdated": "2024-08-04T13:22:30.827Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2020-15677

Vulnerability from cvelistv5

Published

2020-10-01 18:31

Modified

2024-08-04 13:22

Severity ?

Summary

By exploiting an Open Redirect vulnerability on a website, an attacker could have spoofed the site displayed in the download file dialog to show the original site (the one suffering from the open redirect) rather than the site the file was actually downloaded from. This vulnerability affects Firefox < 81, Thunderbird < 78.3, and Firefox ESR < 78.3.

References

▼	URL	Tags
	https://www.mozilla.org/security/advisories/mfsa2020-43/	x_refsource_MISC
	https://www.mozilla.org/security/advisories/mfsa2020-44/	x_refsource_MISC
	https://www.mozilla.org/security/advisories/mfsa2020-42/	x_refsource_MISC
	https://bugzilla.mozilla.org/show_bug.cgi?id=1641487	x_refsource_MISC
	https://www.debian.org/security/2020/dsa-4770	vendor-advisory, x_refsource_DEBIAN
	https://lists.debian.org/debian-lts-announce/2020/10/msg00020.html	mailing-list, x_refsource_MLIST
	https://security.gentoo.org/glsa/202010-02	vendor-advisory, x_refsource_GENTOO
	http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00074.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00077.html	vendor-advisory, x_refsource_SUSE

Impacted products

▼	Vendor	Product
	Mozilla	Firefox
	Mozilla	Thunderbird
	Mozilla	Firefox ESR

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T13:22:30.687Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2020-43/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2020-44/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2020-42/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1641487"
          },
          {
            "name": "DSA-4770",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2020/dsa-4770"
          },
          {
            "name": "[debian-lts-announce] 20201016 [SECURITY] [DLA 2408-1] thunderbird security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2020/10/msg00020.html"
          },
          {
            "name": "GLSA-202010-02",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/202010-02"
          },
          {
            "name": "openSUSE-SU-2020:1780",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00074.html"
          },
          {
            "name": "openSUSE-SU-2020:1785",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00077.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "81",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "78.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "78.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "By exploiting an Open Redirect vulnerability on a website, an attacker could have spoofed the site displayed in the download file dialog to show the original site (the one suffering from the open redirect) rather than the site the file was actually downloaded from. This vulnerability affects Firefox \u003c 81, Thunderbird \u003c 78.3, and Firefox ESR \u003c 78.3."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Download origin spoofing via redirect",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-10-31T15:06:11",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2020-43/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2020-44/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2020-42/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1641487"
        },
        {
          "name": "DSA-4770",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2020/dsa-4770"
        },
        {
          "name": "[debian-lts-announce] 20201016 [SECURITY] [DLA 2408-1] thunderbird security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2020/10/msg00020.html"
        },
        {
          "name": "GLSA-202010-02",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/202010-02"
        },
        {
          "name": "openSUSE-SU-2020:1780",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00074.html"
        },
        {
          "name": "openSUSE-SU-2020:1785",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00077.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@mozilla.org",
          "ID": "CVE-2020-15677",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Firefox",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "81"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Thunderbird",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "78.3"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Firefox ESR",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "78.3"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Mozilla"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "By exploiting an Open Redirect vulnerability on a website, an attacker could have spoofed the site displayed in the download file dialog to show the original site (the one suffering from the open redirect) rather than the site the file was actually downloaded from. This vulnerability affects Firefox \u003c 81, Thunderbird \u003c 78.3, and Firefox ESR \u003c 78.3."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Download origin spoofing via redirect"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2020-43/",
              "refsource": "MISC",
              "url": "https://www.mozilla.org/security/advisories/mfsa2020-43/"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2020-44/",
              "refsource": "MISC",
              "url": "https://www.mozilla.org/security/advisories/mfsa2020-44/"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2020-42/",
              "refsource": "MISC",
              "url": "https://www.mozilla.org/security/advisories/mfsa2020-42/"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1641487",
              "refsource": "MISC",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1641487"
            },
            {
              "name": "DSA-4770",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2020/dsa-4770"
            },
            {
              "name": "[debian-lts-announce] 20201016 [SECURITY] [DLA 2408-1] thunderbird security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2020/10/msg00020.html"
            },
            {
              "name": "GLSA-202010-02",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/202010-02"
            },
            {
              "name": "openSUSE-SU-2020:1780",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00074.html"
            },
            {
              "name": "openSUSE-SU-2020:1785",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00077.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2020-15677",
    "datePublished": "2020-10-01T18:31:16",
    "dateReserved": "2020-07-10T00:00:00",
    "dateUpdated": "2024-08-04T13:22:30.687Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

rhsa-2020_4158

Vulnerability from csaf_redhat

cve-2020-15678

Vulnerability from cvelistv5

cve-2020-15676

Vulnerability from cvelistv5

cve-2020-15673

Vulnerability from cvelistv5

cve-2020-15677

Vulnerability from cvelistv5

Tags

Sightings

Nomenclature