Lucene search

K
ubuntucveUbuntu.comUB:CVE-2020-6810
HistoryMar 11, 2020 - 12:00 a.m.

CVE-2020-6810

2020-03-1100:00:00
ubuntu.com
ubuntu.com
16
firefox
fullscreen
vulnerability
spoofing
notification
credential theft

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

EPSS

0.001

Percentile

36.1%

After a website had entered fullscreen mode, it could have used a
previously opened popup to obscure the notification that indicates the
browser is in fullscreen mode. Combined with spoofing the browser chrome,
this could have led to confusing the user about the current origin of the
page and credential theft or other attacks. This vulnerability affects
Firefox < 74.

Notes

Author Note
tyhicks mozjs contains a copy of the SpiderMonkey JavaScript engine
OSVersionArchitecturePackageVersionFilename
ubuntu18.04noarchfirefox< 74.0+build3-0ubuntu0.18.04.1UNKNOWN
ubuntu19.10noarchfirefox< 74.0+build3-0ubuntu0.19.10.1UNKNOWN
ubuntu20.04noarchfirefox< 74.0+build3-0ubuntu1UNKNOWN
ubuntu20.10noarchfirefox< 74.0+build3-0ubuntu1UNKNOWN
ubuntu21.04noarchfirefox< 74.0+build3-0ubuntu1UNKNOWN
ubuntu21.10noarchfirefox< 74.0+build3-0ubuntu1UNKNOWN
ubuntu22.04noarchfirefox< 74.0+build3-0ubuntu1UNKNOWN
ubuntu22.10noarchfirefox< 74.0+build3-0ubuntu1UNKNOWN
ubuntu23.04noarchfirefox< 74.0+build3-0ubuntu1UNKNOWN
ubuntu23.10noarchfirefox< 74.0+build3-0ubuntu1UNKNOWN
Rows per page:
1-10 of 121

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

EPSS

0.001

Percentile

36.1%