Mozilla: Extensions granted downloads.open permission could open arbitrary applications on Mac OSX
Published Mar 2, 2020
4.3
MEDIUMCVSS 3.1
EPSS 1.48%
Description
By downloading a file with the .fileloc extension, a semi-privileged extension could launch an arbitrary application on the user's computer. The attacker is restricted as they are unable to download non-quarantined files or supply command line arguments to the application, limiting the impact. Note: this issue only occurs on Mac OSX. Other operating systems are unaffected. This vulnerability affects Thunderbird < 68.5, Firefox < 73, and Firefox < ESR68.5.
Affected products
-
- Version unspecifiedStatusaffectedConstraints<73
- Version unspecifiedStatusaffectedConstraints<ESR68.5
- Version
-
- Version unspecifiedStatusaffectedConstraints<68.5
- Version
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | |||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Mozilla | Firefox | n/a |
| |||||||||
| Mozilla | Thunderbird | n/a |
|
- < 73.0
- < 68.5.0
- < 68.5.0
No data.
Red Hat Enterprise Linux 5
firefox
Not affected
Red Hat Enterprise Linux 5
thunderbird
Not affected
Red Hat Enterprise Linux 6
firefox
Not affected
Red Hat Enterprise Linux 6
thunderbird
Not affected
Red Hat Enterprise Linux 7
firefox
Not affected
Red Hat Enterprise Linux 7
thunderbird
Not affected
Red Hat Enterprise Linux 8
firefox
Not affected
Red Hat Enterprise Linux 8
thunderbird
Not affected
| Product | Package | State | Advisory |
|---|---|---|---|
| Red Hat Enterprise Linux 5 | firefox | Not affected | n/a |
| Red Hat Enterprise Linux 5 | thunderbird | Not affected | n/a |
| Red Hat Enterprise Linux 6 | firefox | Not affected | n/a |
| Red Hat Enterprise Linux 6 | thunderbird | Not affected | n/a |
| Red Hat Enterprise Linux 7 | firefox | Not affected | n/a |
| Red Hat Enterprise Linux 7 | thunderbird | Not affected | n/a |
| Red Hat Enterprise Linux 8 | firefox | Not affected | n/a |
| Red Hat Enterprise Linux 8 | thunderbird | Not affected | n/a |
No package ranges for this CVE.
Remediation
No remediation recorded yet.
References (11)
- https://access.redhat.com/security/cve/CVE-2020-6797 Vendor Advisory
- https://bugzilla.mozilla.org/show_bug.cgi?id=1596668 x_refsource_MISCIssue TrackingPermissions Required
- https://bugzilla.redhat.com/show_bug.cgi?id=1801917 Issue Tracking
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-27944 Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2020-6797
- https://security.gentoo.org/glsa/202003-02 vendor-advisoryx_refsource_GENTOOThird Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2020-6797
- https://www.mozilla.org/en-US/security/advisories/mfsa2020-06/#CVE-2020-6797
- https://www.mozilla.org/security/advisories/mfsa2020-05/ x_refsource_MISCVendor Advisory
- https://www.mozilla.org/security/advisories/mfsa2020-06/ x_refsource_MISCVendor Advisory
- https://www.mozilla.org/security/advisories/mfsa2020-07/ x_refsource_MISCVendor Advisory
| Link | Providers | Tags |
|---|---|---|
| https://access.redhat.com/security/cve/CVE-2020-6797 | Vendor Advisory | |
| https://bugzilla.mozilla.org/show_bug.cgi?id=1596668 | x_refsource_MISCIssue TrackingPermissions Required | |
| https://bugzilla.redhat.com/show_bug.cgi?id=1801917 | Issue Tracking | |
| https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-27944 | Advisory | |
| https://nvd.nist.gov/vuln/detail/CVE-2020-6797 | ||
| https://security.gentoo.org/glsa/202003-02 | vendor-advisoryx_refsource_GENTOOThird Party Advisory | |
| https://www.cve.org/CVERecord?id=CVE-2020-6797 | ||
| https://www.mozilla.org/en-US/security/advisories/mfsa2020-06/#CVE-2020-6797 | ||
| https://www.mozilla.org/security/advisories/mfsa2020-05/ | x_refsource_MISCVendor Advisory | |
| https://www.mozilla.org/security/advisories/mfsa2020-06/ | x_refsource_MISCVendor Advisory | |
| https://www.mozilla.org/security/advisories/mfsa2020-07/ | x_refsource_MISCVendor Advisory |
Change history (0)
No recorded changes yet.