During the initialization of a new content process, a pointer offset can be manipulated leading to memory corruption and a potentially exploitable crash in the parent process. *Note: this issue only occurs on Windows. Other operating systems are unaffected.*. This vulnerability affects Firefox ESR < 68.4 and Firefox < 72.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Mfsa2020 01 | — | Upgrade to the latest version of Mozilla FirefoxUpgrade to Mozilla Firefox version 72.0 | Jan 8, 2020 | Jan 7, 2020 |
| Mfsa2020 02 | — | Upgrade to the latest version of Mozilla FirefoxUpgrade to Mozilla Firefox ESR version 68.4 | Jan 8, 2020 | Jan 7, 2020 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 68.4.1Upgrade to the latest version of Mozilla Thunderbird | Jan 13, 2020 | Jan 8, 2020 |
| Oracle Solaris | — | Upgrade mail/thunderbird to version 68.4.1-11.4.18.0.1.3.0 on Solaris 11.4Upgrade mail/thunderbird/plugin/thunderbird-lightning to version 68.4.1-11.4.18.0.1.3.0 on Solaris 11.4Upgrade web/data/firefox-bookmarks to version 68.4.1-11.4.18.0.1.3.0 on Solaris 11.4Upgrade web/browser/firefox to version 68.4.1-11.4.18.0.1.3.0 on Solaris 11.4 | Jan 19, 2021 | Jan 8, 2020 |
| Suse | — | Upgrade MozillaFirefoxUpgrade MozillaFirefox-develUpgrade MozillaThunderbirdUpgrade MozillaFirefox-translations-commonUpgrade MozillaThunderbird-translations-commonUpgrade MozillaFirefox-translations-otherUpgrade mozillafirefox-buildsymbolsUpgrade mozillafirefox-branding-upstreamUpgrade MozillaThunderbird-translations-other | Jan 11, 2020 | Jan 8, 2020 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub