This update for MozillaFirefox to version 68.7.0 ESR fixes the following issues :

CVE-2020-6821: Uninitialized memory could be read when using the WebGL copyTexSubImage method (bsc#1168874).

CVE-2020-6822: Fixed out of bounds write in GMPDecodeData when processing large images (bsc#1168874).

CVE-2020-6825: Fixed Memory safety bugs (bsc#1168874).

CVE-2020-6827: Custom Tabs could have the URI spoofed (bsc#1168874).

CVE-2020-6828: Preference overwrite via crafted Intent (bsc#1168874).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The version of Thunderbird installed on the remote macOS or Mac OS X host is prior to 68.7.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2020-14 advisory.

  - Mozilla developers Tyson Smith and Christian Holler reported memory safety bugs present in Firefox 74 and     Firefox ESR 68.6. Some of these bugs showed evidence of memory corruption and we presume that with enough     effort some of these could have been exploited to run arbitrary code. (CVE-2020-6825)

  - Under certain conditions, when running the nsDocShell destructor, a race condition can cause a use-after-     free. (CVE-2020-6819)

  - Under certain conditions, when handling a ReadableStream, a race condition can cause a use-after-free.
    (CVE-2020-6820)

  - When reading from areas partially or fully outside the source resource with WebGL's     <code>copyTexSubImage</code> method, the specification requires the returned values be zero. Previously,     this memory was uninitialized, leading to potentially sensitive data disclosure. (CVE-2020-6821)

  - On 32-bit builds, an out of bounds write could have occurred when processing an image larger than 4 GB in     <code>GMPDecodeData</code>. It is possible that with enough effort this could have been exploited to run     arbitrary code. (CVE-2020-6822)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:1488 advisory.

    Mozilla Thunderbird is a standalone mail and newsgroup client.

    This update upgrades Thunderbird to version 68.7.0.

    Security Fix(es):

    * Mozilla: Use-after-free while running the nsDocShell destructor (CVE-2020-6819)

    * Mozilla: Use-after-free when handling a ReadableStream (CVE-2020-6820)

    * Mozilla: Uninitialized memory could be read when using the WebGL copyTexSubImage method (CVE-2020-6821)

    * Mozilla: Memory safety bugs fixed in Firefox 75 and Firefox ESR 68.7 (CVE-2020-6825)

    * Mozilla: Out of bounds write in GMPDecodeData when processing large images (CVE-2020-6822)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

This update for MozillaThunderbird to version 68.7.0 fixes the following issues :

  - CVE-2020-6819: Use-after-free while running the     nsDocShell destructor (boo#1168630)

  - CVE-2020-6820: Use-after-free when handling a     ReadableStream (boo#1168630)

  - CVE-2020-6821: Uninitialized memory could be read when     using the WebGL copyTexSubImage() (boo#1168874)

  - CVE-2020-6822: Out of bounds write in GMPDecodeData when     processing large images (boo#1168874)

  - CVE-2020-6825: Memory safety bugs fixed (boo#1168874)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:1496 advisory.

    Mozilla Thunderbird is a standalone mail and newsgroup client.

    This update upgrades Thunderbird to version 68.7.0.

    Security Fix(es):

    * Mozilla: Use-after-free while running the nsDocShell destructor (CVE-2020-6819)

    * Mozilla: Use-after-free when handling a ReadableStream (CVE-2020-6820)

    * Mozilla: Uninitialized memory could be read when using the WebGL copyTexSubImage method (CVE-2020-6821)

    * Mozilla: Memory safety bugs fixed in Firefox 75 and Firefox ESR 68.7 (CVE-2020-6825)

    * Mozilla: Out of bounds write in GMPDecodeData when processing large images (CVE-2020-6822)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Thunderbird installed on the remote Windows host is prior to 68.7.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2020-14 advisory.

  - Mozilla developers Tyson Smith and Christian Holler reported memory safety bugs present in Firefox 74 and     Firefox ESR 68.6. Some of these bugs showed evidence of memory corruption and we presume that with enough     effort some of these could have been exploited to run arbitrary code. (CVE-2020-6825)

  - Under certain conditions, when running the nsDocShell destructor, a race condition can cause a use-after-     free. (CVE-2020-6819)

  - Under certain conditions, when handling a ReadableStream, a race condition can cause a use-after-free.
    (CVE-2020-6820)

  - When reading from areas partially or fully outside the source resource with WebGL's     <code>copyTexSubImage</code> method, the specification requires the returned values be zero. Previously,     this memory was uninitialized, leading to potentially sensitive data disclosure. (CVE-2020-6821)

  - On 32-bit builds, an out of bounds write could have occurred when processing an image larger than 4 GB in     <code>GMPDecodeData</code>. It is possible that with enough effort this could have been exploited to run     arbitrary code. (CVE-2020-6822)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version MAIN 6.01, has thunderbird packages installed that are affected by multiple vulnerabilities:

  - By encoding Unicode whitespace characters within the     From email header, an attacker can spoof the sender     email address that Thunderbird displays. This     vulnerability affects Thunderbird < 68.8.0.
    (CVE-2020-12397)

  - Under certain conditions, when running the nsDocShell     destructor, a race condition can cause a use-after-free.
    We are aware of targeted attacks in the wild abusing     this flaw. This vulnerability affects Thunderbird <     68.7.0, Firefox < 74.0.1, and Firefox ESR < 68.6.1.
    (CVE-2020-6819)

  - Under certain conditions, when handling a     ReadableStream, a race condition can cause a use-after-     free. We are aware of targeted attacks in the wild     abusing this flaw. This vulnerability affects     Thunderbird < 68.7.0, Firefox < 74.0.1, and Firefox ESR     < 68.6.1. (CVE-2020-6820)

  - When reading from areas partially or fully outside the     source resource with WebGL's     copyTexSubImage method, the specification     requires the returned values be zero. Previously, this     memory was uninitialized, leading to potentially     sensitive data disclosure. This vulnerability affects     Thunderbird < 68.7.0, Firefox ESR < 68.7, and Firefox <     75. (CVE-2020-6821)

  - On 32-bit builds, an out of bounds write could have     occurred when processing an image larger than 4 GB in     GMPDecodeData. It is possible that with     enough effort this could have been exploited to run     arbitrary code. This vulnerability affects Thunderbird <     68.7.0, Firefox ESR < 68.7, and Firefox < 75.
    (CVE-2020-6822)

  - Mozilla developers and community members Tyson Smith and     Christian Holler reported memory safety bugs present in     Firefox 74 and Firefox ESR 68.6. Some of these bugs     showed evidence of memory corruption and we presume that     with enough effort some of these could have been     exploited to run arbitrary code. This vulnerability     affects Thunderbird < 68.7.0, Firefox ESR < 68.7, and     Firefox < 75. (CVE-2020-6825)

  - A race condition when running shutdown code for Web     Worker led to a use-after-free vulnerability. This     resulted in a potentially exploitable crash. This     vulnerability affects Firefox ESR < 68.8, Firefox < 76,     and Thunderbird < 68.8.0. (CVE-2020-12387)

  - A buffer overflow could occur when parsing and     validating SCTP chunks in WebRTC. This could have led to     memory corruption and a potentially exploitable crash.
    This vulnerability affects Firefox ESR < 68.8, Firefox <     76, and Thunderbird < 68.8.0. (CVE-2020-6831)

  - The 'Copy as cURL' feature of Devtools' network tab did     not properly escape the HTTP POST data of a request,     which can be controlled by the website. If a user used     the 'Copy as cURL' feature and pasted the command into a     terminal, it could have resulted in the disclosure of     local files. This vulnerability affects Firefox ESR <     68.8, Firefox < 76, and Thunderbird < 68.8.0.
    (CVE-2020-12392)

  - Mozilla developers and community members reported memory     safety bugs present in Firefox 75 and Firefox ESR 68.7.
    Some of these bugs showed evidence of memory corruption     and we presume that with enough effort some of these     could have been exploited to run arbitrary code. This     vulnerability affects Firefox ESR < 68.8, Firefox < 76,     and Thunderbird < 68.8.0. (CVE-2020-12395)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 4 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2020-4709:03 advisory.

    * Mozilla: Use-after-free while running the nsDocShell destructor (CVE-2020-6819)
      * Mozilla: Use-after-free when handling a ReadableStream (CVE-2020-6820)
      * Mozilla: Uninitialized memory could be read when using the WebGL copyTexSubImage method     (CVE-2020-6821)
      * Mozilla: Memory safety bugs fixed in Firefox 75 and Firefox ESR 68.7 (CVE-2020-6825)
      * Mozilla: Out of bounds write in GMPDecodeData when processing large images (CVE-2020-6822)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
135396	SUSE SLED15 / SLES15 Security Update : MozillaFirefox (SUSE-SU-2020:0971-1)	Nessus	SuSE Local Security Checks	2020/4/10	2024/3/19	critical
135412	Mozilla Thunderbird < 68.7.0	Nessus	MacOS X Local Security Checks	2020/4/14	2025/11/18	critical
135687	RHEL 6 : thunderbird (RHSA-2020:1488)	Nessus	Red Hat Local Security Checks	2020/4/16	2024/11/7	critical
135578	openSUSE Security Update : MozillaThunderbird (openSUSE-2020-520)	Nessus	SuSE Local Security Checks	2020/4/15	2022/12/5	critical
135691	RHEL 8 : thunderbird (RHSA-2020:1496)	Nessus	Red Hat Local Security Checks	2020/4/16	2024/11/7	critical
135413	Mozilla Thunderbird < 68.7.0	Nessus	Windows	2020/4/14	2025/11/18	critical
138776	NewStart CGSL MAIN 6.01 : thunderbird Multiple Vulnerabilities (NS-SA-2020-0036)	Nessus	NewStart CGSL Local Security Checks	2020/7/21	2023/4/25	critical
294639	MiracleLinux 4 : thunderbird-68.7.0-1.AXS4 (AXSA:2020-4709:03)	Nessus	Miracle Linux Local Security Checks	2026/1/20	2026/1/21	critical

检测

插件搜索

critical

critical

critical

critical

critical

critical

critical

critical