Mozilla: Use-after-free while running the nsDocShell destructor

A flaw was found in Mozilla Firefox. A race condition can occur while running the nsDocShell destructor causing a use-after-free memory issue. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

Security fix for the ALT Linux 10 package firefox-esr version 68.6.1-alt1

April 4, 2020 Andrey Cherepanov 68.6.1-alt1 - New ESR version 68.6.1. - Fixed: + CVE-2020-6819 Use-after-free while running the nsDocShell destructor + CVE-2020-6820 Use-after-free when handling a ReadableStream...

PT-2020-2004

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 74.0.1 Firefox ESR versions prior to 68.6.1 Thunderbird versions prior to 68.7.0 Description The issue is related to a use-after-free flaw in the nsDocShell destructor, which can be triggered under certain conditions...

UBUNTU-CVE-2020-6819

Under certain conditions, when running the nsDocShell destructor, a race condition can cause a use-after-free. We are aware of targeted attacks in the wild abusing this flaw. This vulnerability affects Thunderbird 68.7.0, Firefox 74.0.1, and Firefox ESR 68.6.1...

VulnCheck KEV: CVE-2020-6819

Mozilla Firefox and Thunderbird contain a race condition vulnerability when running the nsDocShell destructor under certain conditions. The race condition creates a use-after-free vulnerability, causing unspecified impacts...

Mozilla Firefox < 52 Multiple Vulnerabilities

Binary data 9986.prm...

The vulnerability of the Firefox browser, which allows a malicious attacker to execute arbitrary code.

Mozilla Firefox’s software contains a vulnerability in the nsDocShell::InternalLoad function. Exploiting this vulnerability allows an attacker to execute arbitrary code by performing “cross-site scripting” attacks using specially crafted network requests...

The vulnerability of the SeaMonkey software package, which allows a malicious attacker to execute arbitrary code.

The SeaMonkey software contains a vulnerability in the nsDocShell::InternalLoad function. Exploiting this vulnerability allows an attacker to execute arbitrary code by performing cross-site scripting attacks using specially crafted network requests...

The vulnerability of the Thunderbird email client, which allows a remote attacker to execute arbitrary code.

Mozilla Thunderbird’s software contains a vulnerability in the nsDocShell::InternalLoad function. Exploiting this vulnerability allows an attacker to execute arbitrary code by performing “cross-site scripting” attacks using specially crafted network requests...

PT-2014-1287

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 29.0 Mozilla Firefox ESR versions prior to 24.5 Mozilla Thunderbird versions prior to 24.5 SeaMonkey versions prior to 2.26 Description The issue allows a remote attacker to execute arbitrary code by conductin...

Design/Logic Flaw

The nsDocShell::OnRedirectStateChange function in docshell/base/nsDocShell.cpp in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, and SeaMonkey before 2.0.6, allows remote attackers to spoof the SSL security status of a document via vectors involving multiple requests, a redirect, and...

CVE-2010-2751: Undefined Security Weakness

The nsDocShell::OnRedirectStateChange function in docshell/base/nsDocShell.cpp in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, and SeaMonkey before 2.0.6, allows remote attackers to spoof the SSL security status of a document via vectors involving multiple requests, a redirect, and...