Mozilla: Preference overwrite via crafted Intent from malicious Android application
Published Apr 24, 2020
7.5
HIGHCVSS 3.1
EPSS 1.51%
Description
A malicious Android application could craft an Intent that would have been processed by Firefox for Android and potentially result in a file overwrite in the user's profile directory. One exploitation vector for this would be to supply a user.js file providing arbitrary malicious preference values. Control of arbitrary preferences can lead to sufficient compromise such that it is generally equivalent to arbitrary code execution.<br> *Note: This issue only affects Firefox for Android. Other operating systems are unaffected.*. This vulnerability affects Firefox ESR < 68.7.
Affected products
-
Affected
- ≥ unspecified, < 68.7
Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).
| Vendor | Product | Default status | Versions |
|---|---|---|---|
| Mozilla | Firefox ESR | unknown | Affected
|
- < 68.7.0
No data.
Red Hat Enterprise Linux 5
firefox
Not affected
Red Hat Enterprise Linux 6
firefox
Not affected
Red Hat Enterprise Linux 7
firefox
Not affected
Red Hat Enterprise Linux 8
firefox
Not affected
| Product | Package | State | Advisory |
|---|---|---|---|
| Red Hat Enterprise Linux 5 | firefox | Not affected | n/a |
| Red Hat Enterprise Linux 6 | firefox | Not affected | n/a |
| Red Hat Enterprise Linux 7 | firefox | Not affected | n/a |
| Red Hat Enterprise Linux 8 | firefox | Not affected | n/a |
No package ranges for this CVE.
Remediation
Red Hat statement
This issue only affects Firefox for Android. Other operating systems are unaffected.
References (8)
- https://access.redhat.com/security/cve/CVE-2020-6828 Vendor Advisory
- https://bugzilla.mozilla.org/show_bug.cgi?id=1617928 x_refsource_MISCIssue TrackingPermissions Required
- https://bugzilla.redhat.com/show_bug.cgi?id=1821967 Issue Tracking
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-27972 Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2020-6828
- https://www.cve.org/CVERecord?id=CVE-2020-6828
- https://www.mozilla.org/en-US/security/advisories/mfsa2020-13/#CVE-2020-6828
- https://www.mozilla.org/security/advisories/mfsa2020-13/ x_refsource_MISCVendor Advisory
| Link | Providers | Tags |
|---|---|---|
| https://access.redhat.com/security/cve/CVE-2020-6828 | Vendor Advisory | |
| https://bugzilla.mozilla.org/show_bug.cgi?id=1617928 | x_refsource_MISCIssue TrackingPermissions Required | |
| https://bugzilla.redhat.com/show_bug.cgi?id=1821967 | Issue Tracking | |
| https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-27972 | Advisory | |
| https://nvd.nist.gov/vuln/detail/CVE-2020-6828 | ||
| https://www.cve.org/CVERecord?id=CVE-2020-6828 | ||
| https://www.mozilla.org/en-US/security/advisories/mfsa2020-13/#CVE-2020-6828 | ||
| https://www.mozilla.org/security/advisories/mfsa2020-13/ | x_refsource_MISCVendor Advisory |
Change history (0)
No recorded changes yet.
CVE.org / MITRE
CISA Vulnrichment
No data
GitHub
No data