CVE-2020-6799 - Mozilla: Arbitrary code execution when opening pdf links from other applications, when Firefox is configured as default pdf reader

Back Back to CVE browser

HIGH

Mozilla: Arbitrary code execution when opening pdf links from other applications, when Firefox is configured as default pdf reader

Published Mar 2, 2020

8.8

HIGH

CVSS 3.1

EPSS 1.53%

Description

Command line arguments could have been injected during Firefox invocation as a shell handler for certain unsupported file types. This required Firefox to be configured as the default handler for a given file type and for a file downloaded to be opened in a third party application that insufficiently sanitized URL data. In that situation, clicking a link in the third party application could have been used to retrieve and execute files whose location was supplied through command line arguments. Note: This issue only affects Windows operating systems and when Firefox is configured as the default handler for non-default filetypes. Other operating systems are unaffected. This vulnerability affects Firefox < 73 and Firefox < ESR68.5.

Affected products

Vendor Mozilla Product Firefox Default
n/a
- Version
  unspecified
  Status
  affected
  Constraints
  <73
- Version
  unspecified
  Status
  affected
  Constraints
  <ESR68.5

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Mozilla

Firefox

n/a

Version	Status	Constraints
unspecified	affected	<73
unspecified	affected	<ESR68.5

Red Hat Enterprise Linux 5

firefox

Not affected
Red Hat Enterprise Linux 6

firefox

Not affected
Red Hat Enterprise Linux 7

firefox

Not affected
Red Hat Enterprise Linux 8

firefox

Not affected

Product	Package	State	Advisory
Red Hat Enterprise Linux 5	firefox	Not affected	n/a
Red Hat Enterprise Linux 6	firefox	Not affected	n/a
Red Hat Enterprise Linux 7	firefox	Not affected	n/a
Red Hat Enterprise Linux 8	firefox	Not affected	n/a

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-77

CWE-88

References (10)

https://access.redhat.com/security/cve/CVE-2020-6799
Vendor Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=1606596
x_refsource_MISCIssue TrackingPatchVendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1801919
Issue Tracking
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-27946
Advisory
https://nvd.nist.gov/vuln/detail/CVE-2020-6799
https://security.gentoo.org/glsa/202003-02
vendor-advisoryx_refsource_GENTOOThird Party Advisory
https://www.cve.org/CVERecord?id=CVE-2020-6799
https://www.mozilla.org/en-US/security/advisories/mfsa2020-06/#CVE-2020-6799
https://www.mozilla.org/security/advisories/mfsa2020-05/
x_refsource_MISCVendor Advisory
https://www.mozilla.org/security/advisories/mfsa2020-06/
x_refsource_MISCVendor Advisory

Link	Providers	Tags
https://access.redhat.com/security/cve/CVE-2020-6799		Vendor Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=1606596		x_refsource_MISCIssue TrackingPatchVendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1801919		Issue Tracking
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-27946		Advisory
https://nvd.nist.gov/vuln/detail/CVE-2020-6799
https://security.gentoo.org/glsa/202003-02		vendor-advisoryx_refsource_GENTOOThird Party Advisory
https://www.cve.org/CVERecord?id=CVE-2020-6799
https://www.mozilla.org/en-US/security/advisories/mfsa2020-06/#CVE-2020-6799
https://www.mozilla.org/security/advisories/mfsa2020-05/		x_refsource_MISCVendor Advisory
https://www.mozilla.org/security/advisories/mfsa2020-06/		x_refsource_MISCVendor Advisory