Security Fix(es) :

  - Mozilla: Memory safety bugs fixed in Firefox 81 and     Firefox ESR 78.3 (CVE-2020-15673)

  - Mozilla: Integer overflow in     nsJPEGEncoder::emptyOutputBuffer (CVE-2020-12422)

  - Mozilla: X-Frame-Options bypass using object or embed     tags (CVE-2020-15648)

  - Mozilla: Bypassing iframe sandbox when allowing popups     (CVE-2020-15653)

  - Mozilla: Type confusion for special arguments in     IonMonkey (CVE-2020-15656)

  - Mozilla: XSS when pasting attacker-controlled data into     a contenteditable element (CVE-2020-15676)

  - Mozilla: Download origin spoofing via redirect     (CVE-2020-15677)

  - Mozilla: When recursing through layers while scrolling,     an iterator may have become invalid, resulting in a     potential use-after-free scenario (CVE-2020-15678)

  - Mozilla: WebRTC permission prompt could have been     bypassed by a compromised content process     (CVE-2020-12424)

  - Mozilla: Out of bound read in Date.parse()     (CVE-2020-12425)

  - Mozilla: Custom cursor can overlay user interface     (CVE-2020-15654)

  - Mozilla: Overriding file type when saving to disk     (CVE-2020-15658)

ID	Name	Product	Family	Published	Updated	Severity
141760	Scientific Linux Security Update : firefox on SL7.x x86_64 (20201001)	Nessus	Scientific Linux Local Security Checks	10/21/2020	2/14/2024	high
147407	NewStart CGSL MAIN 4.06 : firefox Multiple Vulnerabilities (NS-SA-2021-0004)	Nessus	NewStart CGSL Local Security Checks	3/10/2021	4/25/2023	critical

Detections

Analytics

Plugins Search

high

critical