Lucene search
PRIOn knowledge basePRION:CVE-2020-6828HistoryApr 24, 2020 - 4:15 p.m.
Design/Logic Flaw
2020-04-2416:15:00
PRIOn knowledge base
www.prio-n.com
4
A malicious Android application could craft an Intent that would have been processed by Firefox for Android and potentially result in a file overwrite in the user’s profile directory. One exploitation vector for this would be to supply a user.js file providing arbitrary malicious preference values. Control of arbitrary preferences can lead to sufficient compromise such that it is generally equivalent to arbitrary code execution.<br> Note: This issue only affects Firefox for Android. Other operating systems are unaffected.. This vulnerability affects Firefox ESR < 68.7.
| CPE | Name | Operator | Version |
|---|---|---|---|
| firefox_esr | lt | 68.7.0 |
Related
nvd
nvd
CVE-2020-6828
2020-04-24 16:15:13
cvelist
cvelist
CVE-2020-6828
2020-04-24 15:48:22
redhatcve
redhatcve
CVE-2020-6828
2020-04-08 02:05:44
cve
cve
CVE-2020-6828
2020-04-24 16:15:13
debiancve
debiancve
CVE-2020-6828
2020-04-24 16:15:13
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2020:0971-1)
2021-06-09 00:00:00
Mozilla Firefox ESR Security Advisories (MFSA2020-12, MFSA2020-13) - Windows
2020-04-08 00:00:00
kaspersky
kaspersky
KLA11726 Multiple vulnerabilities in Mozilla Firefox ESR
2020-04-07 00:00:00
nessus
nessus
Mozilla Firefox ESR < 68.7 Multiple Vulnerabilities (mfsa2020-13)
2020-04-07 00:00:00
Slackware 14.2 / current : mozilla-firefox (SSA:2020-098-01)
2020-04-08 00:00:00
SUSE SLES12 Security Update : MozillaFirefox (SUSE-SU-2020:0978-1)
2020-04-10 00:00:00
mozilla
mozilla
Security Vulnerabilities fixed in Firefox ESR 68.7 — Mozilla
2020-04-07 00:00:00
suse
suse
Security update for MozillaFirefox (important)
2020-04-10 00:00:00
slackware
slackware
[slackware-security] mozilla-firefox
2020-04-07 22:50:22
altlinux
altlinux
Security fix for the ALT Linux 10 package firefox-esr version 68.7.0-alt1
2020-04-06 00:00:00