Lucene search
IBMFC8424A77E293D3B173E3198C816BBA0D3116923783091727C067F5978D8C02EHistoryFeb 25, 2021 - 7:57 a.m.
Security Bulletin: Multiple vulnerabilities of Mozilla Firefox (less than Firefox 78.5 ESR + CVE-2020-26950) have affected Synthetic Playback Agent 8.1.4.0-8.1.4 IF12 + ICAM2019.3.0 - 2020.2.0
2021-02-2507:57:37
www.ibm.com
29
mozilla firefox
synthetic playback agent
cve-2020-26950
apm am
bam
apm saas
apm on-premise
icam 2019.3.0
icam 2020.2.3
EPSS
0.916
Percentile
99.0%
Summary
Synthetic Playback Agent has addressed the following vulnerabilities: CVE-2020-26950
Vulnerability Details
CVEID:CVE-2020-26950
**DESCRIPTION:**Mozilla Firefox could allow a remote attacker to execute arbitrary code on the system, caused by the failure to account for write side effects in MCallGetProperty opcode. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability using unknown attack vectors to trigger a use-after-free error and execute arbitrary code on the vulnerable system or cause a denial of service.
CVSS Base score: 8.8
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/191339 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Affected Products and Versions
| Affected Product(s) | Version(s) |
|---|---|
| APM AM | 8.1.4 |
| BAM | 1.0 |
| APM SaaS | 8.1.4 |
| APM on-premise | 8.1.4 |
| ICAM | 2019.3.0 |
Remediation/Fixes
| Product Remediation | Fix |
|---|---|
| APM on-premise | Synthetic Playback Agent 8.1.4 IF13 |
| ICAM | ICAM 2020.2.3 |
Workarounds and Mitigations
None
Related
debiancve
debiancve
CVE-2020-26950
2020-12-09 01:15:12
nessus
nessus
Mozilla Firefox ESR < 78.4.1
2020-11-09 00:00:00
RHEL 6 : firefox (RHSA-2020:5104)
2020-11-12 00:00:00
Debian DSA-4790-1 : thunderbird - security update
2020-11-17 00:00:00
debian
debian
[SECURITY] [DSA 4790-1] thunderbird security update
2020-11-12 21:40:43
[SECURITY] [DSA 4788-1] firefox-esr security update
2020-11-10 18:53:26
[SECURITY] [DLA 2449-1] thunderbird security update
2020-11-13 10:41:43
redhat
redhat
(RHSA-2020:5146) Important: thunderbird security update
2020-11-18 13:37:24
(RHSA-2020:5104) Critical: firefox security update
2020-11-12 14:22:08
(RHSA-2020:5164) Important: thunderbird security update
2020-11-23 08:24:38
openvas
openvas
Debian: Security Advisory (DSA-4788-1)
2020-11-12 00:00:00
Mozilla Firefox ESR Security Advisories (MFSA2020-49, MFSA2020-49) - Windows
2020-11-10 00:00:00
Mozilla Firefox Security Advisory (MFSA2020-49) - Mac OS X
2020-11-10 00:00:00
osv
osv
thunderbird - security update
2020-11-13 00:00:00
firefox-esr - security update
2020-11-10 00:00:00
thunderbird - security update
2020-11-12 00:00:00
cvelist
cvelist
CVE-2020-26950
2020-12-09 00:19:22
kaspersky
kaspersky
KLA11994 Use after free vulnerability in Mozilla Thunderbird
2020-11-09 00:00:00
KLA11996 Use after free vulnerability in Mozilla Firefox ESR
2020-11-09 00:00:00
KLA11995 Use after free vulnerability in Mozilla Firefox
2020-11-09 00:00:00
oraclelinux
oraclelinux
firefox security update
2020-11-17 00:00:00
thunderbird security update
2020-11-19 00:00:00
thunderbird security update
2020-11-24 00:00:00
mozilla
mozilla
veracode
veracode
Denial Of Service (DoS)
2020-11-13 07:27:01
altlinux
altlinux
Security fix for the ALT Linux 10 package firefox-esr version 78.4.1-alt1
2020-11-10 00:00:00
Security fix for the ALT Linux 10 package thunderbird version 78.4.2-alt1
2020-11-11 00:00:00
nvd
nvd
CVE-2020-26950
2020-12-09 01:15:12
alpinelinux
alpinelinux
CVE-2020-26950
2020-12-09 01:15:12
centos
centos
firefox security update
2020-11-19 13:49:09
mageia
mageia
Updated firefox and thunderbird packages fix a security vulnerability
2020-11-14 00:20:36
suse
suse
Security update for MozillaThunderbird (moderate)
2020-12-01 00:00:00
Security update for MozillaFirefox (important)
2020-11-14 00:00:00
Security update for MozillaFirefox (important)
2020-11-14 00:00:00
redhatcve
redhatcve
CVE-2020-26950
2020-11-10 09:29:06
malwarebytes
malwarebytes
Mozilla patches critical security issues in Firefox and Thunderbird
2020-11-10 15:22:29
prion
prion
Race condition
2020-12-09 01:15:00
packetstorm
packetstorm
Firefox MCallGetProperty Write Side Effects Use-After-Free
2022-03-01 00:00:00
checkpoint_advisories
checkpoint_advisories
Mozilla Firefox Use After Free (CVE-2020-26950)
2022-05-08 00:00:00
archlinux
archlinux
[ASA-202011-6] firefox: arbitrary code execution
2020-11-10 00:00:00
ubuntu
ubuntu
Firefox vulnerability
2020-11-10 00:00:00
Thunderbird vulnerabilities
2020-11-25 00:00:00
zdt
zdt
Firefox MCallGetProperty Write Side Effects Use-After-Free Exploit
2022-03-02 00:00:00
cve
cve
CVE-2020-26950
2020-12-09 01:15:12
gentoo
gentoo
Mozilla Firefox: Remote code execution
2020-11-11 00:00:00
ubuntucve
ubuntucve
CVE-2020-26950
2020-11-10 00:00:00
metasploit
metasploit
Firefox MCallGetProperty Write Side Effects Use After Free Exploit
2022-02-16 08:33:24
amazon
amazon
Critical: thunderbird
2020-12-08 21:30:00
rapid7blog
rapid7blog
Metasploit Weekly Wrap-Up
2022-03-04 21:52:42
rosalinux
rosalinux
Advisory ROSA-SA-2021-1835
2021-07-02 16:43:38
EPSS
0.916
Percentile
99.0%
Related for FC8424A77E293D3B173E3198C816BBA0D3116923783091727C067F5978D8C02E