Kaspersky ID:
KLA11730
Erkennungsdatum:
04/09/2020
Aktualisiert:
01/28/2026

Beschreibung

Multiple vulnerabilities were found in Mozilla Thunderbird. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, obtain sensitive information.

Below is a complete list of vulnerabilities:

  1. Memory corruption vulnerability can be exploited to execute arbitrary code.
  2. Use after free vulnerability in nsDocShell destructor can be exploited to cause denial of service.
  3. Uninitialized memory vulnerability in WebGL can be exploited to potentially obtain sensitive information.
  4. Out of bounds write vulnerability in GMPDecodeData can be exploited to execute arbitrary code.
  5. Use after free vulnerability in ReadableStream can be exploited to cause denial of service.

Ursprüngliche Informationshinweise

Ausnutzung

Public exploits exist for this vulnerability.

Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.

Betroffene Produkte

CVE Liste

  • CVE-2020-6819
    critical
  • CVE-2020-6820
    critical
  • CVE-2020-6822
    critical
  • CVE-2020-6825
    critical
  • CVE-2020-6821
    critical

Mehr erfahren

Informieren Sie sich über die Statistiken der in Ihrer Region verbreiteten Sicherheitslücken statistics.securelist.com

Sie haben einen Fehler in der Beschreibung der Schwachstelle gefunden? Mitteilen!
Kaspersky Next
Let´s go Next: Cybersicherheit neu gedacht
Erfahren Sie mehr
Neu: Kaspersky!
Dein digitales Leben verdient umfassenden Schutz!
Erfahren Sie mehr
Do you want to save your changes?
Your message has been sent successfully.