Multiple vulnerabilities in Mozilla Firefox ESR

Описание

Multiple vulnerabilities were found in Mozilla Firefox ESR. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code, perform cross-site scripting attack.

Below is a complete list of vulnerabilities:

1. A write-operation memory vulnerability can be exploited to cause denial of service.
2. Bypass security vulnerability can be exploited to execute arbitrary code only on Mac OSX.
3. Cross-site scripting vulnerability can be exploited remotely to perform cross-site scripting attacks.
4. A default handler vulnerability can be exploited to execute arbitrary code only in Windows.
5. A memory corruption vulnerability can be exploited to execute arbitrary code.

Первичный источник обнаружения

• mfsa2020-06
  

Связанные продукты

• Mozilla-Firefox-ESR

Список CVE

• CVE-2020-6800
  high
• CVE-2020-6797
  warning
• CVE-2020-6798
  warning
• CVE-2020-6799
  high
• CVE-2020-6796
  high

Смотрите также

Узнай статистику распространения уязвимостей в своем регионе statistics.securelist.com