Lucene search
PRIOn knowledge basePRION:CVE-2020-15678HistoryOct 01, 2020 - 7:15 p.m.
Design/Logic Flaw
2020-10-0119:15:00
PRIOn knowledge base
www.prio-n.com
2
When recursing through graphical layers while scrolling, an iterator may have become invalid, resulting in a potential use-after-free. This occurs because the function APZCTreeManager::ComputeClippedCompositionBounds did not follow iterator invalidation rules. This vulnerability affects Firefox < 81, Thunderbird < 78.3, and Firefox ESR < 78.3.
| CPE | Name | Operator | Version |
|---|---|---|---|
| debian_linux | eq | 9.0 | |
| debian_linux | eq | 10.0 | |
| firefox | lt | 81.0 | |
| firefox_esr | lt | 78.3 | |
| thunderbird | lt | 78.3 | |
| leap | eq | 15.1 | |
| leap | eq | 15.2 |
References
lists.opensuse.org/opensuse-security-announce/2020-10/msg00074.html
lists.opensuse.org/opensuse-security-announce/2020-10/msg00077.html
bugzilla.mozilla.org/show_bug.cgi?id=1660211
lists.debian.org/debian-lts-announce/2020/10/msg00020.html
security.gentoo.org/glsa/202010-02
www.debian.org/security/2020/dsa-4770
www.mozilla.org/security/advisories/mfsa2020-42/
www.mozilla.org/security/advisories/mfsa2020-43/
www.mozilla.org/security/advisories/mfsa2020-44/
Related
alpinelinux
alpinelinux
CVE-2020-15678
2020-10-01 19:15:13
ubuntucve
ubuntucve
CVE-2020-15678
2020-09-25 00:00:00
nvd
nvd
CVE-2020-15678
2020-10-01 19:15:13
cve
cve
CVE-2020-15678
2020-10-01 19:15:13
redhatcve
redhatcve
CVE-2020-15678
2020-09-22 20:48:11
veracode
veracode
Denial Of Service (DoS)
2020-09-24 10:29:28
cvelist
cvelist
CVE-2020-15678
2020-10-01 18:29:27
debiancve
debiancve
CVE-2020-15678
2020-10-01 19:15:13
nessus
nessus
Mozilla Firefox ESR < 78.3
2020-09-22 00:00:00
RHEL 8 : firefox (RHSA-2020:3834)
2020-09-24 00:00:00
Debian DSA-4768-1 : firefox-esr - security update
2020-09-29 00:00:00
gentoo
gentoo
Mozilla Firefox, Mozilla Thunderbird: Multiple vulnerabilities
2020-10-17 00:00:00
openvas
openvas
Mageia: Security Advisory (MGASA-2020-0377)
2022-01-28 00:00:00
SUSE: Security Advisory (SUSE-SU-2020:14502-1)
2021-06-09 00:00:00
Debian: Security Advisory (DLA-2408-1)
2020-10-17 00:00:00
debian
debian
[SECURITY] [DLA 2387-1] firefox-esr security update
2020-09-28 21:34:23
[SECURITY] [DLA 2408-1] thunderbird security update
2020-10-16 22:49:47
[SECURITY] [DSA 4768-1] firefox-esr security update
2020-09-28 18:13:44
suse
suse
Security update for MozillaFirefox (important)
2020-09-28 00:00:00
Security update for MozillaFirefox (important)
2020-09-29 00:00:00
Security update for MozillaThunderbird and mozilla-nspr (important)
2020-10-31 00:00:00
mozilla
mozilla
Security Vulnerabilities fixed in Firefox ESR 78.3 — Mozilla
2020-09-22 00:00:00
Security Vulnerabilities fixed in Thunderbird 78.3 — Mozilla
2020-09-22 00:00:00
Security Vulnerabilities fixed in Firefox 81 — Mozilla
2020-09-22 00:00:00
kaspersky
kaspersky
KLA11964 Multiple vulnerabilities in Mozilla Firefox ESR
2020-09-22 00:00:00
KLA11966 Multiple vulnerabilities in Mozilla Thunderbird
2020-09-22 00:00:00
KLA11963 Multiple vulnerabilities in Mozilla Firefox
2020-09-22 00:00:00
mageia
mageia
Updated firefox packages fix security vulnerabilities
2020-09-30 13:01:40
Updated Thunderbird packages fix security vulnerabilities
2020-09-30 13:01:40
redhat
redhat
(RHSA-2020:4156) Important: thunderbird security update
2020-10-01 12:56:19
(RHSA-2020:3832) Important: firefox security update
2020-09-24 09:41:06
(RHSA-2020:4158) Important: thunderbird security update
2020-10-01 12:56:42
osv
osv
thunderbird - security update
2020-10-06 00:00:00
firefox-esr - security update
2020-09-28 00:00:00
firefox-esr - security update
2020-09-28 00:00:00
ibm
ibm
oraclelinux
oraclelinux
firefox security update
2020-11-14 00:00:00
thunderbird security update
2020-10-04 00:00:00
firefox security update
2020-09-24 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 10 package firefox-esr version 78.3.0-alt1
2020-09-23 00:00:00
Security fix for the ALT Linux 10 package thunderbird version 78.3.0-alt1
2020-09-25 00:00:00
archlinux
archlinux
[ASA-202009-10] firefox: multiple issues
2020-09-23 00:00:00
ubuntu
ubuntu
Firefox vulnerabilities
2020-09-28 00:00:00
threatpost
threatpost
Firefox 81 Release Kills High-Severity Code-Execution Bugs
2020-09-22 15:14:43
amazon
amazon
Critical: thunderbird
2020-12-08 21:30:00
rosalinux
rosalinux
Advisory ROSA-SA-2021-1835
2021-07-02 16:43:38