Security Fix(es) :

  - Mozilla: Use-after-free in SharedWorkerService     (CVE-2020-12405)

  - Mozilla: JavaScript Type confusion with NativeTypes     (CVE-2020-12406)

  - Mozilla: Memory safety bugs fixed in Firefox 77 and     Firefox ESR 68.9 (CVE-2020-12410)

This update for MozillaFirefox fixes the following issues :

Mozilla Firefox was updated to version 68.9.0 Extended Support Release (bsc#1172402).

CVE-2020-12405: Fixed a use-after-free in SharedWorkerService.

CVE-2020-12406: Fixed a JavaScript Type confusion with NativeTypes.

CVE-2020-12410: Fixed multiple memory safety bugs.

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote SUSE Linux SLES11 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2020:14389-1 advisory.

  - When browsing a malicious page, a race condition in our SharedWorkerService could occur and lead to a     potentially exploitable crash. This vulnerability affects Thunderbird < 68.9.0, Firefox < 77, and Firefox     ESR < 68.9. (CVE-2020-12405)

  - Mozilla Developer Iain Ireland discovered a missing type check during unboxed objects removal, resulting     in a crash. We presume that with enough effort that it could be exploited to run arbitrary code. This     vulnerability affects Thunderbird < 68.9.0, Firefox < 77, and Firefox ESR < 68.9. (CVE-2020-12406)

  - Mozilla developers reported memory safety bugs present in Firefox 76 and Firefox ESR 68.8. Some of these     bugs showed evidence of memory corruption and we presume that with enough effort some of these could have     been exploited to run arbitrary code. This vulnerability affects Thunderbird < 68.9.0, Firefox < 77, and     Firefox ESR < 68.9. (CVE-2020-12410)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of thunderbird installed on the remote host is prior to 68.9.0-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2020-1468 advisory.

    The Mozilla Foundation Security Advisory describes this flaw as:

    If Thunderbird is configured to use STARTTLS for an IMAP server, and the server sends a PREAUTH response,     then Thunderbird will continue with an unencrypted connection, causing email data to be sent without     protection. (CVE-2020-12398)

    The Mozilla Foundation Security Advisory describes this flaw as:

    When browsing a malicious page, a race condition in our SharedWorkerService could occur and lead to a     potentially exploitable crash. (CVE-2020-12405)

    The Mozilla Foundation Security Advisory describes this flaw as:

    Mozilla developer Iain Ireland discovered a missing type check during unboxed objects removal, resulting     in a crash. We presume that with enough effort that it could be exploited to run arbitrary code.
    (CVE-2020-12406)

    The Mozilla Foundation Security Advisory describes this flaw as:

    Mozilla developers reported memory safety bugs present in Firefox 76 and Firefox ESR 68.8. Some of these     bugs showed evidence of memory corruption and we presume that with enough effort some of these could have     been exploited to run arbitrary code. (CVE-2020-12410)

    The Mozilla Foundation Security Advisory describes this flaw as:

    Due to confusion about ValueTags on JavaScript Objects, an object may pass through the type barrier,     resulting in memory corruption and a potentially exploitable crash. (CVE-2020-12417)

    The Mozilla Foundation Security Advisory describes this flaw as:

    Manipulating individual parts of a URL object could have caused an out-of-bounds read, leaking process     memory to malicious JavaScript. (CVE-2020-12418)

    The Mozilla Foundation Security Advisory describes this flaw as:

    When processing callbacks that occurred during window flushing in the parent process, the associated     window may die; causing a use-after-free condition. This could have led to memory corruption and a     potentially exploitable crash. (CVE-2020-12419)

    The Mozilla Foundation Security Advisory describes this flaw as:

    When trying to connect to a STUN server, a race condition could have caused a use-after-free of a pointer,     leading to memory corruption and a potentially exploitable crash. (CVE-2020-12420)

    The Mozilla Foundation Security Advisory describes this flaw as:

    When performing add-on updates, certificate chains terminating in non-built-in-roots were rejected (even     if they were legitimately added by an administrator.) This could have caused add-ons to become out-of-date     silently without notification to the user. (CVE-2020-12421)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
137176	Scientific Linux Security Update : firefox on SL7.x x86_64 (20200603)	Nessus	Scientific Linux Local Security Checks	6/5/2020	3/7/2024	high
137596	SUSE SLES12 Security Update : MozillaFirefox (SUSE-SU-2020:1563-1)	Nessus	SuSE Local Security Checks	6/18/2020	3/6/2024	high
150602	SUSE SLES11 Security Update : MozillaFirefox (SUSE-SU-2020:14389-1)	Nessus	SuSE Local Security Checks	6/10/2021	12/26/2023	high
138857	Amazon Linux 2 : thunderbird (ALAS-2020-1468)	Nessus	Amazon Linux Local Security Checks	7/23/2020	4/11/2025	high
147312	NewStart CGSL MAIN 4.06 : thunderbird Multiple Vulnerabilities (NS-SA-2021-0002)	Nessus	NewStart CGSL Local Security Checks	3/10/2021	4/25/2023	critical

Detections

Analytics

Plugins Search

high

high

high

high

critical