By holding a reference to the eval() function from an about:blank window, a malicious webpage could have gained access to the InstallTrigger object which would allow them to prompt the user to install an extension. Combined with user confusion, this could result in an unintended or malicious extension being installed. This vulnerability affects Firefox < 80, Thunderbird < 78.2, Thunderbird < 68.12, Firefox ESR < 68.12, Firefox ESR < 78.2, and Firefox for Android < 80.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade thunderbirdUpgrade firefoxUpgrade firefox-esrUpgrade librewolf | Aug 22, 2024 | Oct 1, 2020 |
| Amazon Linux Ami 2 | — | Upgrade thunderbirdUpgrade thunderbird-debuginfo | Oct 2, 2020 | Oct 2, 2020 |
| Centos_linux | — | Upgrade thunderbird-debuginfoUpgrade firefox-debuginfoUpgrade firefox-debugsourceUpgrade thunderbird-debugsourceUpgrade firefoxUpgrade thunderbird | Aug 27, 2020 | Aug 26, 2020 |
| Debian | — | Upgrade thunderbirdUpgrade firefox-esr | Aug 28, 2020 | Aug 28, 2020 |
| Gentoo Linux | — | Upgrade mail-client/thunderbird-bin.Upgrade mail-client/thunderbird.Upgrade www-client/firefox-bin.Upgrade www-client/firefox. | Aug 27, 2020 | Aug 27, 2020 |
| Mfsa2020 36 | — | Upgrade to the latest version of Mozilla FirefoxUpgrade to Mozilla Firefox version 80.0 | Aug 26, 2020 | Aug 25, 2020 |
| Mfsa2020 37 | — | Upgrade to Mozilla Firefox ESR version 68.12Upgrade to the latest version of Mozilla Firefox | Aug 26, 2020 | Aug 25, 2020 |
| Mfsa2020 38 | — | Upgrade to Mozilla Firefox ESR version 78.2Upgrade to the latest version of Mozilla Firefox | Aug 26, 2020 | Aug 25, 2020 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 78.2Upgrade to the latest version of Mozilla Thunderbird | Aug 27, 2020 | Aug 25, 2020 |
| Oracle Solaris | — | Upgrade mail/thunderbird to version 68.12.0-11.4.26.0.1.75.2 on Solaris 11.4Upgrade mail/thunderbird/plugin/plugin-lightning to version 0.5.11-11.4.27.0.1.82.0 on Solaris 11.4Upgrade web/browser/firefox to version 68.12.0-11.4.26.0.1.75.2 on Solaris 11.4Upgrade SUNWthunderbird-calendar to version 0.5.11-11.4.27.0.1.82.0 on Solaris 11.4Upgrade web/data/firefox-bookmarks to version 68.12.0-11.4.26.0.1.75.2 on Solaris 11.4Upgrade mail/thunderbird/plugin/thunderbird-lightning to version 68.12.0-11.4.26.0.1.75.2 on Solaris 11.4 | Jan 19, 2021 | Oct 1, 2020 |
| Oracle_linux | — | Upgrade firefoxUpgrade thunderbird | Aug 28, 2020 | Aug 25, 2020 |
| Redhat_linux | — | Upgrade thunderbird-debugsourceUpgrade firefoxUpgrade thunderbirdUpgrade firefox-debugsourceNo solution existsUpgrade firefox-debuginfoUpgrade thunderbird-debuginfo | Aug 27, 2020 | Aug 26, 2020 |
| Suse | — | Upgrade MozillaFirefox-translations-otherUpgrade mozillafirefox-buildsymbolsUpgrade MozillaFirefox-translations-commonUpgrade MozillaThunderbirdUpgrade MozillaThunderbird-translations-commonUpgrade MozillaFirefoxUpgrade mozillafirefox-branding-upstreamUpgrade MozillaThunderbird-translations-otherUpgrade MozillaFirefox-devel | Sep 5, 2020 | Aug 26, 2020 |
| Ubuntu | — | Upgrade firefox | Aug 27, 2020 | Aug 26, 2020 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub