Lucene search

Kaspersky LabKLA12125

HistoryFeb 05, 2021 - 12:00 a.m.

KLA12125 Buffer overflow vulnerability in Mozilla Firefox ESR

2021-02-0500:00:00

Kaspersky Lab

threats.kaspersky.com

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

7.1 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

71.6%

JSON

A buffer overflow vulnerability was found in Mozilla Firefox ESR. Malicious users can exploit this vulnerability to obtain sensitive information, cause denial of service.

Original advisories

MFSA2021-06

Related products

Mozilla-Firefox-ESR

CVE list

CVE-2020-16048 unknown

Solution

Update to the latest version

Download Firefox ESR

Impacts

Obtain sensitive information. Exploitation of vulnerabilities with this impact can lead to capturing by abuser information, critical for user or system.

Denial of service. Exploitation of vulnerabilities with this impact can lead to loss of system availability or critical functional fault.