Medium WID-SEC-2023-0457 14 CVEs

Mozilla Firefox/Thunderbird: Mehrere Schwachstellen

Published Jun 30, 2020 · Updated May 1, 2025 · Revision 21 · de-DE

Vendor: amazon Vendor: Avaya Vendor: Debian Vendor: gentoo Vendor: Mozilla Vendor: Red Hat Vendor: SUSE Vendor: Ubuntu Product: Aura Application Enablement Services Product: Aura Experience Portal Product: Enterprise Linux Product: Firefox Product: Linux Product: Linux Product: Linux Product: Linux Product: Linux 2 Product: one-X Product: Thunderbird Platform: Android Platform: Linux Platform: macOS Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Mozilla Firefox und Thunderbird ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen.

Product

Firefox ist ein Open Source Web Browser.

Vulnerabilities 14

Unscored —

CVE-2020-12402

During RSA key generation, bignum implementations used a variation of the Binary Extended Euclidean Algorithm which ent…

Mozilla Firefox firefox librewolf Browsers Debian Ubuntu Alpine

Jul 9, 2020
Unscored —

CVE-2020-12415

When "%2F" was present in a manifest URL, Firefox's AppCache behavior may have become confused and allowed a manifest t…

Mozilla Firefox thunderbird mozjs38 Browsers Ubuntu Alpine

Jul 9, 2020
Unscored —

CVE-2020-12416

A VideoStreamEncoder may have been freed in a race condition with VideoBroadcaster::AddOrUpdateSink, resulting in a use…

Mozilla Firefox thunderbird mozjs38 Browsers Ubuntu Alpine

Jul 9, 2020
Unscored —

CVE-2020-12417

Due to confusion about ValueTags on JavaScript Objects, an object may pass through the type barrier, resulting in memor…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine

Jul 9, 2020
Unscored —

CVE-2020-12418

Manipulating individual parts of a URL object could have caused an out-of-bounds read, leaking process memory to malici…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine

Jul 9, 2020
Unscored —

CVE-2020-12419

When processing callbacks that occurred during window flushing in the parent process, the associated window may die; ca…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine

Jul 9, 2020
Unscored —

CVE-2020-12420

When trying to connect to a STUN server, a race condition could have caused a use-after-free of a pointer, leading to m…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine

Jul 9, 2020
Unscored —

CVE-2020-12421

When performing add-on updates, certificate chains terminating in non-built-in-roots were rejected (even if they were l…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine

Jul 9, 2020
Unscored —

CVE-2020-12422

In non-standard configurations, a JPEG image created by JavaScript could have caused an internal variable to overflow, …

Mozilla Firefox thunderbird mozjs38 Browsers Ubuntu Alpine

Jul 9, 2020
Unscored —

CVE-2020-12423

When the Windows DLL "webauthn.dll" was missing from the Operating System, and a malicious one was placed in a folder i…

Mozilla Firefox librewolf firefox Browsers Alpine

Jul 9, 2020
Unscored —

CVE-2020-12424

When constructing a permission prompt for WebRTC, a URI was supplied from the content process. This URI was untrusted, …

Mozilla Firefox thunderbird mozjs38 Browsers Ubuntu Alpine

Jul 9, 2020
Unscored —

CVE-2020-12425

Due to confusion processing a hyphen character in Date.parse(), a one-byte out of bounds read could have occurred, lead…

Mozilla Firefox thunderbird mozjs38 Browsers Ubuntu Alpine

Jul 9, 2020
Unscored —

CVE-2020-12426

Mozilla developers and community members reported memory safety bugs present in Firefox 77. Some of these bugs showed e…

Mozilla Firefox thunderbird mozjs38 Browsers Ubuntu Alpine

Jul 9, 2020
Unscored —

CVE-2020-15648

Using object or embed tags, it was possible to frame other websites, even if they disallowed framing using the X-Frame-…

Mozilla Firefox Thunderbird thunderbird Browsers Ubuntu

Aug 10, 2020

Revision history

2025-05-01 #21
Neue Updates von Amazon aufgenommen
2023-02-22 #20
Neue Updates von Amazon aufgenommen
2021-07-12 #19
Neue Updates von Amazon aufgenommen
2021-03-21 #18
Neue Updates von Red Hat aufgenommen
2020-10-06 #17
Neue Updates von Red Hat aufgenommen
2020-09-29 #16
Neue Updates von Red Hat aufgenommen
2020-08-25 #15
Neue Updates von Red Hat aufgenommen
2020-08-03 #14
Neue Updates von Red Hat aufgenommen
2020-07-26 #13
Neue Updates von GENTOO aufgenommen
2020-07-23 #12
Neue Updates von AVAYA aufgenommen
2020-07-21 #11
Neue Updates von Red Hat aufgenommen
2020-07-19 #10
Neue Updates von Debian aufgenommen
2020-07-16 #9
Neue Updates von Mozilla aufgenommen
2020-07-15 #8
Neue Updates von Red Hat aufgenommen
2020-07-14 #7
Neue Updates von Red Hat aufgenommen
2020-07-13 #6
Neue Updates von SUSE aufgenommen
2020-07-08 #5
Neue Updates von SUSE, CentOS und Ubuntu aufgenommen
2020-07-06 #4
Neue Updates von Red Hat aufgenommen
2020-07-05 #3
Neue Updates von Debian aufgenommen
2020-07-02 #2
Neue Updates von Mozilla und Ubuntu aufgenommen
2020-06-30 #1
Initiale Fassung

References

Mozilla Firefox 78.0 Release Notes vom 2020-06-30
https://www.mozilla.org/en-US/firefox/78.0/releasenotes/
Mozilla Security Advisory MFSA2020-26 vom 2020-07-02
https://www.mozilla.org/en-US/security/advisories/mfsa2020-26/
Ubuntu Security Notice USN-4408-1 vom 2020-07-02
https://ubuntu.com/security/notices/USN-4408-1
Ubuntu Security Notice USN-4408-1 vom 2020-07-02
https://usn.ubuntu.com/4408-1/
Debian Security Advisory DSA-4718 vom 2020-07-06
https://www.debian.org/security/2020/dsa-4718
Red Hat Security Advisory RHSA-2020:2826 vom 2020-07-06
https://access.redhat.com/errata/RHSA-2020:2826
Red Hat Security Advisory RHSA-2020:2828 vom 2020-07-06
https://access.redhat.com/errata/RHSA-2020:2828
Red Hat Security Advisory RHSA-2020:2827 vom 2020-07-06
https://access.redhat.com/errata/RHSA-2020:2827
Red Hat Security Advisory RHSA-2020:2824 vom 2020-07-06
https://access.redhat.com/errata/RHSA-2020:2824
Red Hat Security Advisory RHSA-2020:2825 vom 2020-07-06
https://access.redhat.com/errata/RHSA-2020:2825
SUSE Security Update SUSE-SU-2020:14421-1 vom 2020-07-08
http://lists.suse.com/pipermail/sle-security-updates/2020-July/007099.html
CentOS Security Advisory CESA-2020:2827 vom 2020-07-08
http://centos-announce.2309468.n4.nabble.com/CentOS-announce-CESA-2020-2827-Important-CentOS-7-firefox-Security-Update-tp4645976.html
Ubuntu Security Notice USN-4421-1 vom 2020-07-08
https://ubuntu.com/security/notices/USN-4421-1
CentOS Security Advisory CESA-2020:2824 vom 2020-07-08
http://centos-announce.2309468.n4.nabble.com/CentOS-announce-CESA-2020-2824-Important-CentOS-6-firefox-Security-Update-tp4645978.html
SUSE Security Update SUSE-SU-2020:1899-1 vom 2020-07-13
http://lists.suse.com/pipermail/sle-security-updates/2020-July/007121.html
SUSE Security Update SUSE-SU-2020:1900-1 vom 2020-07-13
http://lists.suse.com/pipermail/sle-security-updates/2020-July/007122.html
SUSE Security Update SUSE-SU-2020:1898-1 vom 2020-07-13
http://lists.suse.com/pipermail/sle-security-updates/2020-July/007123.html
Red Hat Security Advisory RHSA-2020:2907 vom 2020-07-14
https://access.redhat.com/errata/RHSA-2020:2907
Red Hat Security Advisory RHSA-2020:2906 vom 2020-07-14
https://access.redhat.com/errata/RHSA-2020:2906
Red Hat Security Advisory RHSA-2020:2966 vom 2020-07-16
https://access.redhat.com/errata/RHSA-2020:2966
Mozilla Security Advisory MFSA2020-29 vom 2020-07-16
https://www.mozilla.org/en-US/security/advisories/mfsa2020-29/
Debian Security Advisory DSA-4726 vom 2020-07-18
https://www.debian.org/security/2020/dsa-4726
Red Hat Security Advisory RHSA-2020:3038 vom 2020-07-21
https://access.redhat.com/errata/RHSA-2020:3038
Red Hat Security Advisory RHSA-2020:3046 vom 2020-07-21
https://access.redhat.com/errata/RHSA-2020:3046
AVAYA Security Advisory ASA-2020-091 vom 2020-07-24
https://downloads.avaya.com/css/P8/documents/101069609
Gentoo Security Advisory
https://security.gentoo.org/glsa/202007-10
Debian Security Advisory
https://security.gentoo.org/glsa/202007-09
Red Hat Security Advisory RHSA-2020:3280 vom 2020-08-03
https://access.redhat.com/errata/RHSA-2020:3280
Red Hat Security Advisory RHSA-2020:3557 vom 2020-08-26
https://access.redhat.com/errata/RHSA-2020:3557
Red Hat Security Advisory RHSA-2020:3555 vom 2020-08-26
https://access.redhat.com/errata/RHSA-2020:3555
Red Hat Security Advisory RHSA-2020:3559 vom 2020-08-26
https://access.redhat.com/errata/RHSA-2020:3559
Red Hat Security Advisory RHSA-2020:4080 vom 2020-09-30
https://access.redhat.com/errata/RHSA-2020:4080
Red Hat Security Advisory RHSA-2020:4201 vom 2020-10-07
https://access.redhat.com/errata/RHSA-2020:4201
Red Hat Security Advisory RHSA-2021:0949 vom 2021-03-22
https://access.redhat.com/errata/RHSA-2021:0949
Amazon Linux Security Advisory ALAS-2021-1522 vom 2021-07-13
https://alas.aws.amazon.com/ALAS-2021-1522.html
Amazon Linux Security Advisory ALAS-2023-1945 vom 2023-02-22
https://alas.aws.amazon.com/AL2/ALAS-2023-1945.html
Amazon Linux Security Advisory ALAS-2025-2836 vom 2025-04-30
https://alas.aws.amazon.com/AL2/ALAS-2025-2836.html