PT-2020-6942
CVE-2020-6796
·
Published
2020-01-20
·
Updated
2026-10-31
Description by
CVSS 2.0
10
HighMetricsAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
Firefox versions prior to 73
Firefox ESR versions prior to 68.5
Description
The issue is related to a buffer overflow, allowing a remote attacker to access confidential data, compromise its integrity, and cause a denial of service. A content process could modify shared memory, leading to an out-of-bounds write, memory corruption, and a potentially exploitable crash.
Recommendations
For Firefox versions prior to 73, update to version 73 or later to resolve the issue.
For Firefox ESR versions prior to 68.5, update to version 68.5 or later to resolve the issue.
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾