Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2020-26959

Опубликовано: 09 дек. 2020
Источник: debian
EPSS Низкий

Описание

During browser shutdown, reference decrementing could have occured on a previously freed object, resulting in a use-after-free, memory corruption, and a potentially exploitable crash. This vulnerability affects Firefox < 83, Firefox ESR < 78.5, and Thunderbird < 78.5.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
firefoxfixed83.0-1package
firefox-esrfixed78.5.0esr-1package
thunderbirdfixed1:78.5.0-1package

Примечания

  • https://www.mozilla.org/en-US/security/advisories/mfsa2020-50/#CVE-2020-26959

  • https://www.mozilla.org/en-US/security/advisories/mfsa2020-51/#CVE-2020-26959

  • https://www.mozilla.org/en-US/security/advisories/mfsa2020-52/#CVE-2020-26959

EPSS

Процентиль: 67%
0.0127
Низкий

Связанные уязвимости

CVSS3: 8.8
ubuntu
больше 5 лет назад

During browser shutdown, reference decrementing could have occured on a previously freed object, resulting in a use-after-free, memory corruption, and a potentially exploitable crash. This vulnerability affects Firefox < 83, Firefox ESR < 78.5, and Thunderbird < 78.5.

CVSS3: 8.8
redhat
больше 5 лет назад

During browser shutdown, reference decrementing could have occured on a previously freed object, resulting in a use-after-free, memory corruption, and a potentially exploitable crash. This vulnerability affects Firefox < 83, Firefox ESR < 78.5, and Thunderbird < 78.5.

CVSS3: 8.8
nvd
больше 5 лет назад

During browser shutdown, reference decrementing could have occured on a previously freed object, resulting in a use-after-free, memory corruption, and a potentially exploitable crash. This vulnerability affects Firefox < 83, Firefox ESR < 78.5, and Thunderbird < 78.5.

github
около 4 лет назад

During browser shutdown, reference decrementing could have occured on a previously freed object, resulting in a use-after-free, memory corruption, and a potentially exploitable crash. This vulnerability affects Firefox < 83, Firefox ESR < 78.5, and Thunderbird < 78.5.

CVSS3: 6.1
fstec
больше 5 лет назад

Уязвимость компонента WebRequestService веб-браузера Firefox и почтового клиента Thunderbird, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 67%
0.0127
Низкий