Lucene search

CVE-2020-26971

🗓️ 07 Jan 2021 14:11:15Reported by mozillaType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 209 Views

Certain blit values not properly constrained causing heap buffer overflow on video drivers. Affects Firefox < 84, Thunderbird < 78.6

Reporter	Title	Published	Views	Family All 141
Veracode	Denial Of Service (DoS)	16 Dec 202008:52	–	veracode
AlpineLinux	CVE-2020-26971	7 Jan 202114:15	–	alpinelinux
RedhatCVE	CVE-2020-26971	15 Dec 202018:32	–	redhatcve
Prion	Heap overflow	7 Jan 202114:15	–	prion
NVD	CVE-2020-26971	7 Jan 202114:15	–	nvd
Debian CVE	CVE-2020-26971	7 Jan 202114:15	–	debiancve
Cvelist	CVE-2020-26971	7 Jan 202113:54	–	cvelist
UbuntuCve	CVE-2020-26971	15 Dec 202000:00	–	ubuntucve
ThreatPost	Firefox Patches Critical Mystery Bug, Also Impacting Google Chrome	15 Dec 202021:04	–	threatpost
Tenable Nessus	Scientific Linux Security Update : firefox on SL7.x i686/x86_64 (2020:5561)	17 Dec 202000:00	–	nessus

Nvd

Vulners

Node

mozilla firefoxRange<84.0

mozilla firefox_esrRange<78.6.0

mozilla thunderbirdRange<78.6.0

[
  {
    "product": "Firefox",
    "vendor": "Mozilla",
    "versions": [
      {
        "lessThan": "84",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "Thunderbird",
    "vendor": "Mozilla",
    "versions": [
      {
        "lessThan": "78.6",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "Firefox ESR",
    "vendor": "Mozilla",
    "versions": [
      {
        "lessThan": "78.6",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
mozilla	www.mozilla.org/security/advisories/mfsa2020-55/
bugzilla	www.bugzilla.mozilla.org/show_bug.cgi
mozilla	www.mozilla.org/security/advisories/mfsa2020-56/
mozilla	www.mozilla.org/security/advisories/mfsa2020-54/

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

07 Jan 2021 14:15Current

8.3High risk

Vulners AI Score8.3

CVSS26.8

CVSS38.8

EPSS0.00419

CWE-787