CVE-2020-6800

EPSS 2.3%

Vexday Risk Score

3Bajo

Decisión SSVC (CISA)

Track

Sin señal de explotación → monitorear

CVSS —EPSS 2.3%KEV nãoPoC —Nuclei —Metasploit —Patch referenciado

Ciclo de vida

02 mar 2020Publicada en NVD

Recomendación: Monitorear — sin señal de explotación por ahora.

Mozilla developers and community members reported memory safety bugs present in Firefox 72 and Firefox ESR 68.4. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. In general, these flaws cannot be exploited through email in the Thunderbird product because scripting is disabled when reading mail, but are potentially risks in browser or browser-like contexts. This vulnerability affects Thunderbird < 68.5, Firefox < 73, and Firefox < ESR68.5.

Productos afectados

Mozilla · Firefox Mozilla · Thunderbird

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →

Referencias

https://bugzilla.mozilla.org/buglist.cgi?bug_id=1595786%2C1596706%2C1598543%2C1604851%2C1608580%2C1608785%2C1605777 https://security.gentoo.org/glsa/202003-02 https://security.gentoo.org/glsa/202003-10 https://usn.ubuntu.com/4278-2/https://usn.ubuntu.com/4328-1/https://usn.ubuntu.com/4335-1/https://www.mozilla.org/security/advisories/mfsa2020-05/https://www.mozilla.org/security/advisories/mfsa2020-06/https://www.mozilla.org/security/advisories/mfsa2020-07/