Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
alpinelinuxAlpine Linux Development TeamALPINE:CVE-2020-6797
HistoryMar 02, 2020 - 5:15 a.m.

CVE-2020-6797

2020-03-0205:15:13
Alpine Linux Development Team
security.alpinelinux.org
26

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

AI Score

5.9

Confidence

Low

EPSS

0.001

Percentile

48.3%

JSON

By downloading a file with the .fileloc extension, a semi-privileged extension could launch an arbitrary application on the user’s computer. The attacker is restricted as they are unable to download non-quarantined files or supply command line arguments to the application, limiting the impact. Note: this issue only occurs on Mac OSX. Other operating systems are unaffected. This vulnerability affects Thunderbird < 68.5, Firefox < 73, and Firefox < ESR68.5.

Related

ubuntucve 1
nvd 1
cvelist 1
prion 1
debiancve 1
redhatcve 1
cve 1
hackerone 1
nessus 11
openvas 7
suse 2
kaspersky 3
slackware 2
mozilla 3
altlinux 2
threatpost 1
gentoo 1
osv 2
ubuntucve
ubuntucve
CVE-2020-6797
2020-03-02 00:00:00
nvd
nvd
CVE-2020-6797
2020-03-02 05:15:13
cvelist
cvelist
CVE-2020-6797
2020-03-02 04:05:03
prion
prion
Code injection
2020-03-02 05:15:00
debiancve
debiancve
CVE-2020-6797
2020-03-02 05:15:13
redhatcve
redhatcve
CVE-2020-6797
2020-03-29 20:04:20
cve
cve
CVE-2020-6797
2020-03-02 05:15:13
hackerone
hackerone
Internet Bug Bounty: Uncovering file quarantine and UX security issues in macOS apps ( .terminal, .fileloc and .url)
2020-07-27 14:43:49
nessus
nessus
Mozilla Firefox ESR < 68.5 Multiple Vulnerabilities
2020-02-21 00:00:00
Mozilla Firefox < 73.0
2020-02-14 00:00:00
SUSE SLED15 / SLES15 Security Update : MozillaFirefox (SUSE-SU-2020:0383-1)
2020-02-18 00:00:00
openvas
openvas
Slackware: Security Advisory (SSA:2020-042-01)
2022-04-21 00:00:00
openSUSE: Security Advisory for MozillaFirefox (openSUSE-SU-2020:0230-1)
2020-02-19 00:00:00
SUSE: Security Advisory (SUSE-SU-2020:0383-1)
2021-06-09 00:00:00
suse
suse
Security update for MozillaFirefox (important)
2020-02-18 00:00:00
Security update for MozillaThunderbird (important)
2020-02-18 00:00:00
kaspersky
kaspersky
KLA11670 Multiple vulnerabilities in Mozilla Firefox ESR
2020-02-11 00:00:00
KLA11668 Multiple vulnerabilities in Mozilla Firefox
2020-02-11 00:00:00
KLA11669 Multiple vulnerabilities in Mozilla Thunderbird
2020-02-11 00:00:00
slackware
slackware
[slackware-security] mozilla-firefox
2020-02-12 05:58:16
[slackware-security] mozilla-thunderbird
2020-02-12 05:58:37
mozilla
mozilla
Security Vulnerabilities fixed in Firefox ESR 68.5 — Mozilla
2020-02-11 00:00:00
Security Vulnerabilities fixed in Firefox 73 — Mozilla
2020-02-11 00:00:00
Security Vulnerabilities fixed in Thunderbird 68.5 — Mozilla
2020-02-11 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 10 package firefox-esr version 68.5.0-alt1
2020-02-12 00:00:00
Security fix for the ALT Linux 10 package thunderbird version 68.5.0-alt1
2020-02-12 00:00:00
threatpost
threatpost
Mozilla Firefox 73 Browser Update Fixes High-Severity RCE Bugs
2020-02-12 19:14:59
gentoo
gentoo
Mozilla Firefox: Multiple vulnerabilities
2020-03-12 00:00:00
osv
osv
MozillaThunderbird-91.1.1-1.1 on GA media
2024-06-15 00:00:00
MozillaFirefox-92.0-1.2 on GA media
2024-06-15 00:00:00

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

AI Score

5.9

Confidence

Low

EPSS

0.001

Percentile

48.3%

JSON
Related for ALPINE:CVE-2020-6797
ubuntucve1nvd1cvelist1prion1debiancve1redhatcve1cve1hackerone1nessus11openvas7suse2kaspersky3slackware2mozilla3altlinux2threatpost1gentoo1osv2