CVE-2020-12406

Description

Mozilla Developer Iain Ireland discovered a missing type check during unboxed objects removal, resulting in a crash. We presume that with enough effort that it could be exploited to run arbitrary code. This vulnerability affects Thunderbird < 68.9.0, Firefox < 77, and Firefox ESR < 68.9.

CVSS Metrics

• v3.1•HIGH•Score: 8.8CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
• v2.0•HIGH•Score: 9.3AV:N/AC:M/Au:N/C:C/I:C/A:C

EPSS Trends

Current EPSS score: 0.25%• Percentile: 49%

Techniques & Countermeasures

• CWE-345•Insufficient Verification of Data Authenticity

  The product does not sufficiently verify the origin or authenticity of data, in a way that causes it to accept invalid data.

Affected Systems

• canonical•ubuntu_linux

  16.04 | 18.04 | 19.10 | 20.04

• mozilla•firefox

  < 77.0 | ≥ unspecified, < 77

• mozilla•firefox_esr

  < 68.9.0 | ≥ unspecified, < 68.9

• mozilla•thunderbird

  < 68.9.0 | ≥ unspecified, < 68.9.0

References (5)

• https://www.mozilla.org/security/advisories/mfsa2020-20/
• https://www.mozilla.org/security/advisories/mfsa2020-21/
• https://www.mozilla.org/security/advisories/mfsa2020-22/
• https://bugzilla.mozilla.org/show_bug.cgi?id=1639590
• https://usn.ubuntu.com/4421-1/