Vulnerability CVE-2020-6825: Information

Description

Mozilla developers and community members Tyson Smith and Christian Holler reported memory safety bugs present in Firefox 74 and Firefox ESR 68.6. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Thunderbird < 68.7.0, Firefox ESR < 68.7, and Firefox < 75.

Severity: CRITICAL (9.8) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

URL: https://nvd.nist.gov/vuln/detail/CVE-2020-6825
Published: April 24, 2020
Modified: July 21, 2021
Error type identifier: CWE-787

Fixed packages

Package name
Branch
Fixed in version
Version from repository
Errata ID
Task #
State
firefoxsisyphus75.0-alt1127.0-alt1ALT-PU-2020-1760-1250006Fixed
firefoxp1075.0-alt1118.0.2-alt0.p10.1ALT-PU-2020-1760-1250006Fixed
firefoxp980.0.1-alt0.1.p9105.0.1-alt0.c9.1ALT-PU-2020-3442-1262506Fixed
firefoxc10f175.0-alt1112.0.2-alt0.p10.1ALT-PU-2020-1760-1250006Fixed
firefoxc9f293.0-alt0.p9.1105.0.1-alt0.c9.1ALT-PU-2021-3368-1288792Fixed
firefoxp1175.0-alt1126.0.1-alt1ALT-PU-2020-1760-1250006Fixed
firefox-esrsisyphus68.7.0-alt1115.11.0-alt1ALT-PU-2020-1692-1249622Fixed
firefox-esrp1068.7.0-alt1115.11.0-alt1ALT-PU-2020-1692-1249622Fixed
firefox-esrp968.7.0-alt1102.11.0-alt0.c9.1ALT-PU-2020-1699-1249623Fixed
firefox-esrc10f168.7.0-alt1115.9.1-alt0.c10.1ALT-PU-2020-1692-1249622Fixed
firefox-esrc9f278.7.1-alt0.1.c9102.12.0-alt0.c9.1ALT-PU-2021-1368-1264611Fixed
firefox-esrp1168.7.0-alt1115.11.0-alt1ALT-PU-2020-1692-1249622Fixed
thunderbirdsisyphus68.7.0-alt1115.9.0-alt1ALT-PU-2020-1701-1249625Fixed
thunderbirdp1068.7.0-alt1115.9.0-alt1ALT-PU-2020-1701-1249625Fixed
thunderbirdp968.7.0-alt2102.11.0-alt0.c9.1ALT-PU-2020-1756-1249804Fixed
thunderbirdc10f168.7.0-alt1115.9.0-alt0.c10.1ALT-PU-2020-1701-1249625Fixed
thunderbirdc9f268.7.0-alt2102.11.0-alt0.c9.1ALT-PU-2020-1756-1249804Fixed
thunderbirdp1168.7.0-alt1115.9.0-alt1ALT-PU-2020-1701-1249625Fixed

References to Advisories, Solutions, and Tools

Hyperlink
Resource
https://www.mozilla.org/security/advisories/mfsa2020-13/
  • Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2020-14/
  • Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2020-12/
  • Vendor Advisory
https://bugzilla.mozilla.org/buglist.cgi?bug_id=1572541%2C1620193%2C1620203
  • Issue Tracking
  • Permissions Required
USN-4335-1
  • Third Party Advisory

    1. Configuration 1

      cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*
      End excliding
      75.0
      cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*
      End excliding
      68.7.0
      cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*
      End excliding
      68.7.0
VKontakte|Telegram|YouTube|Forum|GitHub|Bugzilla
Version: v24.5.3
Back to top