CVE-2020-6796

A content process could have modified shared memory relating to crash reporting information, crash itself, and cause an out-of-bound write. This could have caused memory corruption and a potentially exploitable crash. This vulnerability affects Firefox < 73 and Firefox < ESR68.5.

A content process could have modified shared memory relating to crash reporting information, crash itself, and cause an out-of-bound write. This could have caused memory corruption and a potentially exploitable crash. This vulnerability affects Firefox < 73 and Firefox < ESR68.5.

Updated firefox packages fix security vulnerabilities:

Due to a missing bounds check on shared memory read in the parent process, a content process could have modified shared memory relating to crash reporting information, crash itself, and cause an out-of-bound write. This could have caused memory corruption and a potentially exploitable crash (CVE-2020-6796).

If a <template> tag was used in a <select> tag, the parser could be confused and allow JavaScript parsing and execution when it should not be allowed. A site that relied on the browser behaving correctly could suffer a cross-site scripting vulnerability as a result (CVE-2020-6798).

Memory safety bugs present in Firefox ESR 68.4. Some of these bugs showed evidence of memory corruption and presumably some of these could have been exploited to run arbitrary code (CVE-2020-6800).

Also, nspr has been updated to 4.25 and nss to 3.50.0

This update for MozillaFirefox fixes the following issues:

• Firefox Extended Support Release 68.5.0 ESR
  • Fixed: Various stability and security fixes
• Mozilla Firefox ESR68.5 MFSA 2020-06 (bsc#1163368)
  • CVE-2020-6796 (bmo#1610426) Missing bounds check on shared memory read in the parent process
  • CVE-2020-6797 (bmo#1596668) Extensions granted downloads.open permission could open arbitrary applications on Mac OSX
  • CVE-2020-6798 (bmo#1602944) Incorrect parsing of template tag could result in JavaScript injection
  • CVE-2020-6799 (bmo#1606596) Arbitrary code execution when opening pdf links from other applications, when Firefox is configured as default pdf reader
  • CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543, bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785) Memory safety bugs fixed in Firefox 73 and Firefox ESR 68.5

This update was imported from the SUSE:SLE-15:Update update project.

These are all security issues fixed in the MozillaFirefox-92.0-1.2 package on the GA media of openSUSE Tumbleweed.

These are all security issues fixed in the firefox-esr-128.5.1-1.1 package on the GA media of openSUSE Tumbleweed.

This update for MozillaFirefox fixes the following issues:

• Firefox Extended Support Release 68.5.0 ESR
  • Fixed: Various stability and security fixes
• Mozilla Firefox ESR68.5 MFSA 2020-06 (bsc#1163368)
  • CVE-2020-6796 (bmo#1610426) Missing bounds check on shared memory read in the parent process
  • CVE-2020-6797 (bmo#1596668) Extensions granted downloads.open permission could open arbitrary applications on Mac OSX
  • CVE-2020-6798 (bmo#1602944) Incorrect parsing of template tag could result in JavaScript injection
  • CVE-2020-6799 (bmo#1606596) Arbitrary code execution when opening pdf links from other applications, when Firefox is configured as default pdf reader
  • CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543, bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785) Memory safety bugs fixed in Firefox 73 and Firefox ESR 68.5

This update for MozillaFirefox fixes the following issues:

• Firefox Extended Support Release 68.5.0 ESR
  • CVE-2020-6796 (bmo#1610426) Missing bounds check on shared memory read in the parent process
  • CVE-2020-6797 (bmo#1596668) Extensions granted downloads.open permission could open arbitrary applications on Mac OSX
  • CVE-2020-6798 (bmo#1602944) Incorrect parsing of template tag could result in JavaScript injection
  • CVE-2020-6799 (bmo#1606596) Arbitrary code execution when opening pdf links from other applications, when Firefox is configured as default pdf reader
  • CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543, bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785) Memory safety bugs fixed in Firefox 73 and Firefox ESR 68.5
  • Fixed: Fixed various issues opening files with spaces in their path (bmo#1601905, bmo#1602726)

This update for MozillaFirefox fixes the following issues:

Firefox was updated to version 68.5.0 ESR (bsc#1163368).

Security issues fixed:

• CVE-2020-6796: Fixed a missing bounds check on shared memory in the parent process (bsc#1163368).
• CVE-2020-6798: Fixed a JavaScript code injection issue caused by the incorrect parsing of template tags (bsc#1163368).
• CVE-2020-6799: Fixed a local arbitrary code execution issue when handling PDF links from other applications (bsc#1163368).
• CVE-2020-6800: Fixed several memory safety bugs (bsc#1163368).

Non-security issues fixed:

• Fixed various issues opening files with spaces in their path (bmo#1601905, bmo#1602726).

Multiple security issues were discovered in Firefox. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, conduct cross-site scripting (XSS) attacks, or execute arbitrary code.

USN-4278-1 fixed vulnerabilities in Firefox. This update provides the corresponding update for Ubuntu 16.04 LTS.

Original advisory details:

Multiple security issues were discovered in Firefox. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, conduct cross-site scripting (XSS) attacks, or execute arbitrary code.