JIT optimizations involving the Javascript arguments object could confuse later optimizations. This risk was already mitigated by various precautions in the code, resulting in this bug rated at only moderate severity. This vulnerability affects Firefox ESR < 78.1, Firefox < 79, and Thunderbird < 78.1.
References
Link | Resource |
---|---|
http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00025.html | Third Party Advisory |
https://bugzilla.mozilla.org/show_bug.cgi?id=1647293 | Issue Tracking Permissions Required Vendor Advisory |
https://usn.ubuntu.com/4443-1/ | Third Party Advisory |
https://www.mozilla.org/security/advisories/mfsa2020-30/ | Vendor Advisory |
https://www.mozilla.org/security/advisories/mfsa2020-32/ | Vendor Advisory |
https://www.mozilla.org/security/advisories/mfsa2020-33/ | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
History
02 Feb 2023, 22:19
Type | Values Removed | Values Added |
---|---|---|
References | (UBUNTU) https://usn.ubuntu.com/4443-1/ - Third Party Advisory | |
CPE | cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:* cpe:2.3:o:canonical:ubuntu_linux:20.04:*:*:*:lts:*:*:* cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:* |
|
First Time |
Canonical
Canonical ubuntu Linux |
Information
Published : 2020-08-10 18:15
Updated : 2023-12-10 13:27
NVD link : CVE-2020-15656
Mitre link : CVE-2020-15656
CVE.ORG link : CVE-2020-15656
JSON object : View
Products Affected
mozilla
- thunderbird
- firefox
- firefox_esr
opensuse
- leap
canonical
- ubuntu_linux
CWE
CWE-843
Access of Resource Using Incompatible Type ('Type Confusion')