Lucene search
Mozilla FoundationMFSA2020-03HistoryJan 08, 2020 - 12:00 a.m.
Security Vulnerabilities fixed in Firefox 72.0.1 and Firefox ESR 68.4.1 — Mozilla
2020-01-0800:00:00
Mozilla Foundation
www.mozilla.org
88
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
0.526
Percentile
97.6%
Incorrect alias information in IonMonkey JIT compiler for setting array elements could lead to a type confusion. We are aware of targeted attacks in the wild abusing this flaw.
Affected configurations
Node
mozillafirefoxRange<72.0.1
ORmozillafirefox_esrRange<68.4.1
Related
cisa
cisa
Mozilla Patches Critical Vulnerability
2020-01-08 00:00:00
veracode
veracode
Arbitrary Code Execution
2020-01-18 01:01:54
cisa_kev
cisa_kev
Mozilla Firefox And Thunderbird Type Confusion Vulnerability
2021-11-03 00:00:00
nvd
nvd
CVE-2019-17026
2020-03-02 05:15:12
symantec
symantec
debiancve
debiancve
CVE-2019-17026
2020-03-02 05:15:12
nessus
nessus
Mozilla Firefox < 72.0.1
2020-01-08 00:00:00
Mozilla Firefox ESR < 68.4.1
2020-01-08 00:00:00
Mozilla Firefox ESR < 68.4.1
2020-01-08 00:00:00
archlinux
archlinux
[ASA-202001-3] firefox: arbitrary code execution
2020-01-10 00:00:00
[ASA-202001-4] thunderbird: multiple issues
2020-01-14 00:00:00
debian
debian
[SECURITY] [DLA 2093-1] firefox-esr security update
2020-02-01 04:15:49
[SECURITY] [DSA 4603-1] thunderbird security update
2020-01-17 21:40:41
[SECURITY] [DLA 2061-1] firefox-esr security update
2020-01-09 10:22:20
openvas
openvas
Debian: Security Advisory (DLA-2093-1)
2020-02-02 00:00:00
Mozilla Firefox Security Advisory (MFSA2020-03) - Linux
2021-11-08 00:00:00
Mozilla Firefox ESR Security Advisories (MFSA2020-03, MFSA2020-03) - Windows
2020-01-09 00:00:00
cvelist
cvelist
CVE-2019-17026
2020-03-02 04:05:03
avleonov
avleonov
0day RCE in Firefox
2020-01-12 02:06:26
redhatcve
redhatcve
CVE-2019-17026
2020-01-09 05:09:01
prion
prion
Type confusion
2020-03-02 05:15:00
checkpoint_advisories
checkpoint_advisories
Mozilla Firefox IonMonkey JIT Compiler Type Confusion (CVE-2019-17026)
2022-02-21 00:00:00
osv
osv
firefox-esr - security update
2020-02-01 00:00:00
firefox-esr - security update
2020-01-09 00:00:00
thunderbird - security update
2020-01-17 00:00:00
thn
thn
Critical Firefox 0-Day Under Active Attacks – Update Your Browser Now!
2020-01-09 10:34:00
kaspersky
kaspersky
KLA11630 Type confusion vulnerability in Mozilla Firefox
2020-01-08 00:00:00
KLA11631 Type confusion vulnerability in Mozilla Firefox ESR
2020-01-08 00:00:00
KLA11635 Multiple vulnerabilities in Mozilla Thunderbird
2020-01-10 00:00:00
cve
cve
CVE-2019-17026
2020-03-02 05:15:12
ubuntucve
ubuntucve
CVE-2019-17026
2020-01-09 00:00:00
attackerkb
attackerkb
CVE-2019-17026
2020-03-02 00:00:00
alpinelinux
alpinelinux
CVE-2019-17026
2020-03-02 05:15:12
packetstorm
packetstorm
Firefox 72 IonMonkey JIT Type Confusion
2021-05-13 00:00:00
Mozilla Firefox 67 Array.pop JIT Type Confusion
2022-02-02 00:00:00
zdt
zdt
Mozilla Firefox 72 IonMonkey - JIT Type Confusion Exploit
2021-05-13 00:00:00
Mozilla Firefox 67 - Array.pop JIT Type Confusion Exploit
2022-02-02 00:00:00
exploitdb
exploitdb
Firefox 72 IonMonkey - JIT Type Confusion
2021-05-13 00:00:00
Mozilla Firefox 67 - Array.pop JIT Type Confusion
2022-02-02 00:00:00
githubexploit
githubexploit
Exploit for Type Confusion in Mozilla Firefox
2020-08-27 19:32:07
talosblog
talosblog
Threat Source newsletter (Jan. 9, 2019)
2020-01-10 07:13:41
redhat
redhat
(RHSA-2020:0120) Important: thunderbird security update
2020-01-16 10:45:20
(RHSA-2020:0085) Critical: firefox security update
2020-01-13 13:06:23
(RHSA-2020:0127) Important: thunderbird security update
2020-01-16 12:26:13
oraclelinux
oraclelinux
thunderbird security update
2020-07-07 00:00:00
thunderbird security update
2020-01-16 00:00:00
firefox security update
2020-01-13 00:00:00
mageia
mageia
Updated thunderbird packages fix security vulnerabilities
2020-01-12 02:52:04
Updated firefox packages fix security vulnerability
2020-01-09 23:11:02
centos
centos
thunderbird security update
2020-01-18 14:41:32
thunderbird security update
2020-01-18 14:40:44
firefox security update
2020-01-14 17:25:32
amazon
amazon
Important: thunderbird
2020-02-10 23:43:00
threatpost
threatpost
Mozilla Updates Firefox Browser: Zero-Day Bug Patched, Fingerprinting Nixed
2020-01-08 18:04:42
mozilla
mozilla
Security Vulnerabilities fixed in Thunderbird 68.4.1 — Mozilla
2020-01-10 00:00:00
slackware
slackware
[slackware-security] mozilla-thunderbird
2020-01-11 00:19:13
suse
suse
Security update for MozillaThunderbird (important)
2020-01-22 00:00:00
Security update for MozillaFirefox (important)
2020-01-15 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 10 package thunderbird version 68.4.1-alt1
2020-01-11 00:00:00
ubuntu
ubuntu
Firefox vulnerabilities
2020-01-09 00:00:00
Thunderbird vulnerabilities
2020-01-16 00:00:00
Thunderbird vulnerabilities
2020-04-21 00:00:00
photon
photon
Important Photon OS Security Update - PHSA-2023-3.0-0649
2023-09-14 00:00:00
securelist
securelist
IT threat evolution Q1 2020. Statistics
2020-05-20 10:00:43
gentoo
gentoo
Mozilla Firefox: Multiple vulnerabilities
2020-03-12 00:00:00
qualysblog
qualysblog
Managing CISA Known Exploited Vulnerabilities with Qualys VMDR
2022-02-23 05:39:00
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
0.526
Percentile
97.6%
Related for MFSA2020-03