Vulnerability CVE-2020-26967: Information

Description

When listening for page changes with a Mutation Observer, a malicious web page could confuse Firefox Screenshots into interacting with elements other than those that it injected into the page. This would lead to internal errors and unexpected behavior in the Screenshots code. This vulnerability affects Firefox < 83.

Severity: MEDIUM (6.5) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

URL: https://nvd.nist.gov/vuln/detail/CVE-2020-26967
Published: Dec. 9, 2020
Modified: Dec. 10, 2020

Fixed packages

Package name
Branch
Fixed in version
Version from repository
Errata ID
Task #
State
firefoxsisyphus83.0-alt1127.0-alt1ALT-PU-2020-3384-1261953Fixed
firefoxp1083.0-alt1118.0.2-alt0.p10.1ALT-PU-2020-3384-1261953Fixed
firefoxp993.0-alt0.p9.1105.0.1-alt0.c9.1ALT-PU-2022-1782-1288073Fixed
firefoxc10f183.0-alt1112.0.2-alt0.p10.1ALT-PU-2020-3384-1261953Fixed
firefoxc9f293.0-alt0.p9.1105.0.1-alt0.c9.1ALT-PU-2021-3368-1288792Fixed
firefoxp1183.0-alt1126.0.1-alt1ALT-PU-2020-3384-1261953Fixed
firefox-esrsisyphus91.0.1-alt1115.11.0-alt1ALT-PU-2021-2725-1284617Fixed
firefox-esrp1091.1.0-alt1115.11.0-alt1ALT-PU-2021-2881-1284980Fixed
firefox-esrp991.7.0-alt0.p9.1102.11.0-alt0.c9.1ALT-PU-2022-1781-1288073Fixed
firefox-esrc10f191.1.0-alt1115.9.1-alt0.c10.1ALT-PU-2021-2881-1284980Fixed
firefox-esrc9f291.3.0-alt1.c9.1102.12.0-alt0.c9.1ALT-PU-2021-3369-1288792Fixed
firefox-esrp1191.0.1-alt1115.11.0-alt1ALT-PU-2021-2725-1284617Fixed

References to Advisories, Solutions, and Tools

Hyperlink
Resource
https://www.mozilla.org/security/advisories/mfsa2020-50/
  • Vendor Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=1665820
  • Issue Tracking
  • Permissions Required
  • Vendor Advisory

    1. Configuration 1

      cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*
      End excliding
      83.0
VKontakte|Telegram|YouTube|Forum|GitHub|Bugzilla
Version: v24.5.3
Back to top