vulnerability

SUSE: CVE-2020-15657: SUSE Linux Security Advisory

Severity
7
CVSS
(AV:L/AC:M/Au:N/C:C/I:C/A:C)
Published
Jul 31, 2020
Added
Aug 1, 2020
Modified
Feb 4, 2022

Description

Firefox could be made to load attacker-supplied DLL files from the installation directory. This required an attacker that is already capable of placing files in the installation directory. *Note: This issue only affected Windows operating systems. Other operating systems are unaffected.*. This vulnerability affects Firefox ESR < 78.1, Firefox < 79, and Thunderbird < 78.1.

Solutions

suse-upgrade-gstreamer-plugin-pipewiresuse-upgrade-libpipewire-0_3-0suse-upgrade-mozillafirefoxsuse-upgrade-mozillafirefox-branding-slesuse-upgrade-mozillafirefox-branding-upstreamsuse-upgrade-mozillafirefox-buildsymbolssuse-upgrade-mozillafirefox-develsuse-upgrade-mozillafirefox-translations-commonsuse-upgrade-mozillafirefox-translations-othersuse-upgrade-pipewiresuse-upgrade-pipewire-develsuse-upgrade-pipewire-docsuse-upgrade-pipewire-libjack-0_3suse-upgrade-pipewire-libpulse-0_3suse-upgrade-pipewire-modulessuse-upgrade-pipewire-spa-plugins-0_2suse-upgrade-pipewire-spa-toolssuse-upgrade-pipewire-tools
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.