Paper/Archive/CVE-2020-6825

CVE-2020-6825

Mozilla Thunderbird — Mozilla developers and community members Tyson Smith and Christian Holler reported memory safety bugs present in Firefox 74 and Firefox E…

EPSS 2%CVSS 9.8

critical.is priorityof 100

CVSS 9.8 (NVD)9.8 / 10 × 3029.4 Not in CISA KEV+300.0 EPSS percentile 82.4.824 × 2016.5 No public exploit+100.0 SSVC exploitation: unknown+100.0

Description · from the CVE record

Mozilla developers and community members Tyson Smith and Christian Holler reported memory safety bugs present in Firefox 74 and Firefox ESR 68.6. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Thunderbird < 68.7.0, Firefox ESR < 68.7, and Firefox < 75.

Affected

ProductAffectedFixed inSource

Thunderbirdunspecified – < 68.7.068.7.0CNA

Firefox ESRunspecified – < 68.768.7CNA

Firefoxunspecified – < 7575CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refmozilla.org/security/advisories/mfsa2020-13 refmozilla.org/security/advisories/mfsa2020-12 refmozilla.org/security/advisories/mfsa2020-14 refbugzilla.mozilla.org/buglist.cgi?bug_id=1572541%2C1620193%2C1620203 advisoryusn.ubuntu.com/4335-1