Lucene search
Veracode Vulnerability DatabaseVERACODE:26516HistoryAug 31, 2020 - 3:45 a.m.
Heap Buffer Overflow
2020-08-3103:45:48
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
16
firefox
buffer overflow
mar update
EPSS
0.003
Percentile
68.5%
firefox is vulnerable to heap buffer overflow. When processing a MAR update file, after the signature has been validated, an invalid name length could result in a heap overflow, leading to memory corruption and potentially arbitrary code execution. Within Firefox as released by Mozilla, this issue is only exploitable with the Mozilla-controlled signing key.
Related
cve
cve
CVE-2020-15667
2020-10-01 19:15:13
prion
prion
Design/Logic Flaw
2020-10-01 19:15:00
debiancve
debiancve
CVE-2020-15667
2020-10-01 19:15:13
ubuntucve
ubuntucve
CVE-2020-15667
2020-10-01 00:00:00
redhatcve
redhatcve
CVE-2020-15667
2020-10-02 06:50:11
nvd
nvd
CVE-2020-15667
2020-10-01 19:15:13
cvelist
cvelist
CVE-2020-15667
2020-10-01 18:42:42
alpinelinux
alpinelinux
CVE-2020-15667
2020-10-01 19:15:13
openvas
openvas
Mozilla Firefox Security Advisory (MFSA2020-36) - Linux
2021-11-08 00:00:00
Mozilla Firefox Security Advisories (MFSA2020-36, MFSA2020-38) - Windows
2020-09-02 00:00:00
Mozilla Firefox Security Advisories (MFSA2020-36, MFSA2020-38) - Mac OS X
2020-09-02 00:00:00
nessus
nessus
Mozilla Firefox < 80.0
2020-08-25 00:00:00
Mozilla Firefox < 80.0
2020-08-25 00:00:00
mozilla
mozilla
Security Vulnerabilities fixed in Firefox 80 — Mozilla
2020-08-25 00:00:00
kaspersky
kaspersky
KLA11942 Multiple vulnerabilities in Mozilla Firefox
2020-08-25 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2021-1835
2021-07-02 16:43:38
osv
osv
MozillaFirefox-92.0-1.2 on GA media
2024-06-15 00:00:00