CVE-2020-12410
Summary
| CVE | CVE-2020-12410 |
|---|
| State | PUBLIC |
|---|
| Assigner | [email protected] |
|---|
| Source Priority | CVE Program / NVD first with legacy fallback |
|---|
| Published | 2020-07-09 15:15:00 UTC |
|---|
| Updated | 2022-05-03 13:57:00 UTC |
|---|
| Description | Mozilla developers reported memory safety bugs present in Firefox 76 and Firefox ESR 68.8. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Thunderbird < 68.9.0, Firefox < 77, and Firefox ESR < 68.9. |
|---|
NVD Known Affected Configurations (CPE 2.3)
References
| Reference | Source | Link | Tags |
|---|
| USN-4421-1: Thunderbird vulnerabilities | Ubuntu security notices | Ubuntu |
UBUNTU |
usn.ubuntu.com |
|
| Security Vulnerabilities fixed in Thunderbird 68.9.0 — Mozilla |
MISC |
www.mozilla.org |
Vendor Advisory |
| Security Vulnerabilities fixed in Firefox 77 — Mozilla |
MISC |
www.mozilla.org |
Vendor Advisory |
| Security Vulnerabilities fixed in Firefox ESR 68.9 — Mozilla |
MISC |
www.mozilla.org |
Vendor Advisory |
| Bug List |
MISC |
bugzilla.mozilla.org |
Issue Tracking, Permissions Required, Vendor Advisory |
| CVE Program record |
CVE.ORG |
www.cve.org |
canonical |
| NVD vulnerability detail |
NVD |
nvd.nist.gov |
canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 377192 Alibaba Cloud Linux Security Update for firefox (ALINUX2-SA-2020:0096)
- 500931 Alpine Linux Security Update for firefox-esr
- 501079 Alpine Linux Security Update for mozjs68
- 502375 Alpine Linux Security Update for thunderbird
