CVE-2020-12422

🗓️ 09 Jul 2020 14:39:37Reported by mozillaType

In non-standard configurations, a JPEG image created by JavaScript could have caused an internal variable to overflow, resulting in an out of bounds write, memory corruption, and a potentially exploitable crash. This vulnerability affects Firefox < 78

Reporter	Title	Published	Views	Family All 85
ALT Linux	Security fix for the ALT Linux 10 package firefox-esr version 78.0.1-alt1	4 Jul 202000:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 10 package thunderbird version 78.0-alt1	21 Jul 202000:00	–	altlinux
AlpineLinux	CVE-2020-12422	9 Jul 202014:39	–	alpinelinux
Tenable Nessus	CentOS 8 : firefox (CESA-2020:3557)	1 Feb 202100:00	–	nessus
Tenable Nessus	CentOS 7 : firefox (RHSA-2020:4080)	9 Oct 202400:00	–	nessus
Tenable Nessus	GLSA-202007-10 : Mozilla Firefox: Multiple vulnerabilities	27 Jul 202000:00	–	nessus
Tenable Nessus	Mozilla Firefox < 78.0	2 Jul 202000:00	–	nessus
Tenable Nessus	Mozilla Thunderbird < 78.0	17 Jul 202000:00	–	nessus
Tenable Nessus	Mozilla Firefox < 78.0	2 Jul 202000:00	–	nessus
Tenable Nessus	Mozilla Thunderbird < 78.0	17 Jul 202000:00	–	nessus

NVD

Vulners

Node

mozilla firefoxRange<78.0

Node

opensuse leapMatch15.1

opensuse leapMatch15.2

[
  {
    "product": "Firefox",
    "vendor": "Mozilla",
    "versions": [
      {
        "lessThan": "78",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
mozilla	www.mozilla.org/security/advisories/mfsa2020-24/
lists	www.lists.opensuse.org/opensuse-security-announce/2020-07/msg00027.html
bugzilla	www.bugzilla.mozilla.org/show_bug.cgi
security	www.security.gentoo.org/glsa/202007-10
lists	www.lists.opensuse.org/opensuse-security-announce/2020-07/msg00049.html

21 Nov 2024 04:59Current

8High risk

Vulners AI Score8

CVSS 27.6

CVSS 3.18.8

EPSS0.00612

CWE-787