Multiple vulnerabilities in Mozilla Firefox ESR

Description

Multiple vulnerabilities were found in Mozilla Firefox ESR. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code, perform cross-site scripting attack.

Below is a complete list of vulnerabilities:

1. A write-operation memory vulnerability can be exploited to cause denial of service.
2. Bypass security vulnerability can be exploited to execute arbitrary code only on Mac OSX.
3. Cross-site scripting vulnerability can be exploited remotely to perform cross-site scripting attacks.
4. A default handler vulnerability can be exploited to execute arbitrary code only in Windows.
5. A memory corruption vulnerability can be exploited to execute arbitrary code.

Original advisories

• mfsa2020-06

Related products

• Mozilla-Firefox-ESR

CVE list

• CVE-2020-6800
  high
• CVE-2020-6797
  warning
• CVE-2020-6798
  warning
• CVE-2020-6799
  high
• CVE-2020-6796
  high

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com