Vulnerability   
Search   
    Search 211766 CVE descriptions
and 97459 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

Test ID:1.3.6.1.4.1.25623.1.1.4.2020.3902.1
Category:SuSE Local Security Checks
Title:SUSE: Security Advisory (SUSE-SU-2020:3902-1)
Summary:The remote host is missing an update for the 'MozillaFirefox' package(s) announced via the SUSE-SU-2020:3902-1 advisory.
Description:Summary:
The remote host is missing an update for the 'MozillaFirefox' package(s) announced via the SUSE-SU-2020:3902-1 advisory.

Vulnerability Insight:
This update for MozillaFirefox fixes the following issues:

Firefox Extended Support Release 78.6.0 ESR
* Fixed: Various stability, functionality, and security fixes MFSA
2020-55 (bsc#1180039)
* CVE-2020-16042 (bmo#1679003) Operations on a BigInt could have caused
uninitialized memory to be exposed
* CVE-2020-26971 (bmo#1663466) Heap buffer overflow in WebGL
* CVE-2020-26973 (bmo#1680084) CSS Sanitizer performed incorrect
sanitization
* CVE-2020-26974 (bmo#1681022) Incorrect cast of StyleGenericFlexBasis
resulted in a heap use-after-free
* CVE-2020-26978 (bmo#1677047) Internal network hosts could have been
probed by a malicious webpage
* CVE-2020-35111 (bmo#1657916) The proxy.onRequest API did not catch
view-source URLs
* CVE-2020-35112 (bmo#1661365) Opening an extension-less download may
have inadvertently launched an executable instead
* CVE-2020-35113 (bmo#1664831, bmo#1673589) Memory safety bugs fixed in
Firefox 84 and Firefox ESR 78.6

Affected Software/OS:
'MozillaFirefox' package(s) on SUSE Linux Enterprise Module for Desktop Applications 15-SP1

Solution:
Please install the updated package(s).

CVSS Score:
6.8

CVSS Vector:
AV:N/AC:M/Au:N/C:P/I:P/A:P

Cross-Ref: Common Vulnerability Exposure (CVE) ID: CVE-2020-16042
Common Vulnerability Exposure (CVE) ID: CVE-2020-26971
Common Vulnerability Exposure (CVE) ID: CVE-2020-26973
Common Vulnerability Exposure (CVE) ID: CVE-2020-26974
Common Vulnerability Exposure (CVE) ID: CVE-2020-26978
Common Vulnerability Exposure (CVE) ID: CVE-2020-35111
Common Vulnerability Exposure (CVE) ID: CVE-2020-35112
Common Vulnerability Exposure (CVE) ID: CVE-2020-35113
CopyrightCopyright (C) 2021 Greenbone Networks GmbH

This is only one of 97459 vulnerability tests in our test suite. Find out more about running a complete security audit.

To run a free test of this vulnerability against your system, register below.




© 1998-2021 E-Soft Inc. All rights reserved.