The vulnerability in the Maintenance Service of Mozilla Firefox, Mozilla Firefox ESR, and the Thunderbird email client for Windows allows a malicious actor to execute arbitrary code with elevated privileges.

🗓️ 28 Sep 2022 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 17 Views

Maintenance Service flaw in Firefox and Thunderbird on Windows enables remote elevated code execution.

Reporter	Title	Published	Views	Family All 85
ALT Linux	Security fix for the ALT Linux 10 package thunderbird version 78.2.1-alt1	2 Sep 202000:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 10 package firefox-esr version 78.2.0-alt1	25 Aug 202000:00	–	altlinux
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities of Mozilla Firefox (less than Firefox 68.12.0 ESR + CVE-2020-15664) hava affected Synthetic Playback Agent 8.1.4.0-8.1.4 IF11 + ICAM2019.3.0 - 2020.2.0	27 Sep 202009:09	–	ibm
AlpineLinux	CVE-2020-15663	1 Oct 202018:43	–	alpinelinux
CVE	CVE-2020-15663	1 Oct 202018:43	–	cve
Cvelist	CVE-2020-15663	1 Oct 202018:43	–	cvelist
Debian CVE	CVE-2020-15663	1 Oct 202018:43	–	debiancve
EUVD	EUVD-2020-7650	7 Oct 202500:30	–	euvd
Kaspersky	KLA11942 Multiple vulnerabilities in Mozilla Firefox	25 Aug 202000:00	–	kaspersky
Kaspersky	KLA11943 Multiple vulnerabilities in Mozilla Firefox ESR	25 Aug 202000:00	–	kaspersky

Vulners

Node

OR

mozilla firefox_esrRange<68.12

mozilla thunderbirdRange<68.12

mozilla firefox_esrRange<78.2

mozilla firefoxRange<80

mozilla thunderbirdRange<78.2

novell opensuse_leapMatch15.1

novell opensuse_leapMatch15.2

novell opensuse_leapMatch15.3

novell opensuse_leapMatch15.4

Source	Link
access	www.access.redhat.com/security/cve/cve-2020-15663
bugzilla	www.bugzilla.mozilla.org/show_bug.cgi
cybersecurity-help	www.cybersecurity-help.cz/vdb/SB2020082520
mozilla	www.mozilla.org/en-US/security/advisories/mfsa2020-36/
mozilla	www.mozilla.org/en-US/security/advisories/mfsa2020-37/
mozilla	www.mozilla.org/en-US/security/advisories/mfsa2020-38/
mozilla	www.mozilla.org/en-US/security/advisories/mfsa2020-40/
mozilla	www.mozilla.org/en-US/security/advisories/mfsa2020-41/
suse	www.suse.com/security/cve/CVE-2020-15663.html
security-tracker	www.security-tracker.debian.org/tracker/CVE-2020-15663

16 Sep 2024 00:00Current

8High risk

Vulners AI Score8

CVSS 38.8

CVSS 210

EPSS0.02716

Firefox Thunderbird Windows Maintenance Service Remote code execution Elevated privileges