This update for MozillaFirefox fixes the following issues :

Mozilla Firefox was updated to version 68.9.0 Extended Support Release (bsc#1172402).

CVE-2020-12405: Fixed a use-after-free in SharedWorkerService.

CVE-2020-12406: Fixed a JavaScript Type confusion with NativeTypes.

CVE-2020-12410: Fixed multiple memory safety bugs.

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:2615 advisory.

    Mozilla Thunderbird is a standalone mail and newsgroup client.

    This update upgrades Thunderbird to version 68.9.0.

    Security Fix(es):

    * Mozilla: Security downgrade with IMAP STARTTLS leads to information leakage (CVE-2020-12398)

    * Mozilla: Use-after-free in SharedWorkerService (CVE-2020-12405)

    * Mozilla: JavaScript Type confusion with NativeTypes (CVE-2020-12406)

    * Mozilla: Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9 (CVE-2020-12410)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of thunderbird installed on the remote host is prior to 68.9.0-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2020-1468 advisory.

    The Mozilla Foundation Security Advisory describes this flaw as:

    If Thunderbird is configured to use STARTTLS for an IMAP server, and the server sends a PREAUTH response,     then Thunderbird will continue with an unencrypted connection, causing email data to be sent without     protection. (CVE-2020-12398)

    The Mozilla Foundation Security Advisory describes this flaw as:

    When browsing a malicious page, a race condition in our SharedWorkerService could occur and lead to a     potentially exploitable crash. (CVE-2020-12405)

    The Mozilla Foundation Security Advisory describes this flaw as:

    Mozilla developer Iain Ireland discovered a missing type check during unboxed objects removal, resulting     in a crash. We presume that with enough effort that it could be exploited to run arbitrary code.
    (CVE-2020-12406)

    The Mozilla Foundation Security Advisory describes this flaw as:

    Mozilla developers reported memory safety bugs present in Firefox 76 and Firefox ESR 68.8. Some of these     bugs showed evidence of memory corruption and we presume that with enough effort some of these could have     been exploited to run arbitrary code. (CVE-2020-12410)

    The Mozilla Foundation Security Advisory describes this flaw as:

    Due to confusion about ValueTags on JavaScript Objects, an object may pass through the type barrier,     resulting in memory corruption and a potentially exploitable crash. (CVE-2020-12417)

    The Mozilla Foundation Security Advisory describes this flaw as:

    Manipulating individual parts of a URL object could have caused an out-of-bounds read, leaking process     memory to malicious JavaScript. (CVE-2020-12418)

    The Mozilla Foundation Security Advisory describes this flaw as:

    When processing callbacks that occurred during window flushing in the parent process, the associated     window may die; causing a use-after-free condition. This could have led to memory corruption and a     potentially exploitable crash. (CVE-2020-12419)

    The Mozilla Foundation Security Advisory describes this flaw as:

    When trying to connect to a STUN server, a race condition could have caused a use-after-free of a pointer,     leading to memory corruption and a potentially exploitable crash. (CVE-2020-12420)

    The Mozilla Foundation Security Advisory describes this flaw as:

    When performing add-on updates, certificate chains terminating in non-built-in-roots were rejected (even     if they were legitimately added by an administrator.) This could have caused add-ons to become out-of-date     silently without notification to the user. (CVE-2020-12421)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Multiple security issues have been found in Thunderbird which could result in the setup of a non-encrypted IMAP connection, denial of service or potentially the execution of arbitrary code.

ID	Name	Product	Family	Published	Updated	Severity
137596	SUSE SLES12 Security Update : MozillaFirefox (SUSE-SU-2020:1563-1)	Nessus	SuSE Local Security Checks	6/18/2020	3/6/2024	high
137709	RHEL 7 : thunderbird (RHSA-2020:2615)	Nessus	Red Hat Local Security Checks	6/22/2020	11/8/2024	high
138857	Amazon Linux 2 : thunderbird (ALAS-2020-1468)	Nessus	Amazon Linux Local Security Checks	7/23/2020	4/11/2025	high
137375	Debian DSA-4702-1 : thunderbird - security update	Nessus	Debian Local Security Checks	6/12/2020	3/7/2024	high

Detections

Analytics

Plugins Search

high

high

high

high