cnvd - cnvd-2020-43764

cnvd-2020-43764

Vulnerability from cnvd

Title: Mozilla代码问题漏洞

Description:

Mozilla Firefox等都是美国Mozilla基金会的产品。Mozilla Firefox是一款开源Web浏览器。Mozilla Firefox ESR是Firefox(Web浏览器)的一个延长支持版本。Mozilla Thunderbird是一套从Mozilla Application Suite独立出来的电子邮件客户端软件。

Mozilla Firefox 79之前版本、Firefox ESR 78.1之前版本和Thunderbird 78.1之前版本中存在安全漏洞，该漏洞源于下载文件的代码没有正确处理特殊字符。攻击者可利用该漏洞使浏览器下载的不同类型的文件（与对话框中显示的不同）。

Severity: 低

Patch Name: Mozilla代码问题漏洞的补丁

Patch Description:

Mozilla Firefox 79之前版本、Firefox ESR 78.1之前版本和Thunderbird 78.1之前版本中存在安全漏洞，该漏洞源于下载文件的代码没有正确处理特殊字符。攻击者可利用该漏洞使浏览器下载的不同类型的文件（与对话框中显示的不同）。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。

Formal description:

厂商已发布了漏洞修复程序，请及时关注更新： https://www.mozilla.org/en-US/security/advisories/mfsa2020-30/

Reference: https://vigilance.fr/vulnerability/Mozilla-Firefox-multiple-vulnerabilities-32927

Impacted products

Name
['Mozilla Firefox <79', 'Mozilla Firefox ESR <78.1', 'Mozilla Thunderbird <78.1']

Show details on source website

JSON

To clipboard

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2020-15658",
      "cveUrl": "https://nvd.nist.gov/vuln/detail/CVE-2020-15658"
    }
  },
  "description": "Mozilla Firefox\u7b49\u90fd\u662f\u7f8e\u56fdMozilla\u57fa\u91d1\u4f1a\u7684\u4ea7\u54c1\u3002Mozilla Firefox\u662f\u4e00\u6b3e\u5f00\u6e90Web\u6d4f\u89c8\u5668\u3002Mozilla Firefox ESR\u662fFirefox(Web\u6d4f\u89c8\u5668)\u7684\u4e00\u4e2a\u5ef6\u957f\u652f\u6301\u7248\u672c\u3002Mozilla Thunderbird\u662f\u4e00\u5957\u4eceMozilla Application Suite\u72ec\u7acb\u51fa\u6765\u7684\u7535\u5b50\u90ae\u4ef6\u5ba2\u6237\u7aef\u8f6f\u4ef6\u3002\n\nMozilla Firefox 79\u4e4b\u524d\u7248\u672c\u3001Firefox ESR 78.1\u4e4b\u524d\u7248\u672c\u548cThunderbird 78.1\u4e4b\u524d\u7248\u672c\u4e2d\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u4e0b\u8f7d\u6587\u4ef6\u7684\u4ee3\u7801\u6ca1\u6709\u6b63\u786e\u5904\u7406\u7279\u6b8a\u5b57\u7b26\u3002\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u4f7f\u6d4f\u89c8\u5668\u4e0b\u8f7d\u7684\u4e0d\u540c\u7c7b\u578b\u7684\u6587\u4ef6\uff08\u4e0e\u5bf9\u8bdd\u6846\u4e2d\u663e\u793a\u7684\u4e0d\u540c\uff09\u3002",
  "formalWay": "\u5382\u5546\u5df2\u53d1\u5e03\u4e86\u6f0f\u6d1e\u4fee\u590d\u7a0b\u5e8f\uff0c\u8bf7\u53ca\u65f6\u5173\u6ce8\u66f4\u65b0\uff1a\r\nhttps://www.mozilla.org/en-US/security/advisories/mfsa2020-30/",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2020-43764",
  "openTime": "2020-08-03",
  "patchDescription": "Mozilla Firefox\u7b49\u90fd\u662f\u7f8e\u56fdMozilla\u57fa\u91d1\u4f1a\u7684\u4ea7\u54c1\u3002Mozilla Firefox\u662f\u4e00\u6b3e\u5f00\u6e90Web\u6d4f\u89c8\u5668\u3002Mozilla Firefox ESR\u662fFirefox(Web\u6d4f\u89c8\u5668)\u7684\u4e00\u4e2a\u5ef6\u957f\u652f\u6301\u7248\u672c\u3002Mozilla Thunderbird\u662f\u4e00\u5957\u4eceMozilla Application Suite\u72ec\u7acb\u51fa\u6765\u7684\u7535\u5b50\u90ae\u4ef6\u5ba2\u6237\u7aef\u8f6f\u4ef6\u3002\r\n\r\nMozilla Firefox 79\u4e4b\u524d\u7248\u672c\u3001Firefox ESR 78.1\u4e4b\u524d\u7248\u672c\u548cThunderbird 78.1\u4e4b\u524d\u7248\u672c\u4e2d\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u4e0b\u8f7d\u6587\u4ef6\u7684\u4ee3\u7801\u6ca1\u6709\u6b63\u786e\u5904\u7406\u7279\u6b8a\u5b57\u7b26\u3002\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u4f7f\u6d4f\u89c8\u5668\u4e0b\u8f7d\u7684\u4e0d\u540c\u7c7b\u578b\u7684\u6587\u4ef6\uff08\u4e0e\u5bf9\u8bdd\u6846\u4e2d\u663e\u793a\u7684\u4e0d\u540c\uff09\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Mozilla\u4ee3\u7801\u95ee\u9898\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": [
      "Mozilla Firefox \u003c79",
      "Mozilla Firefox ESR \u003c78.1",
      "Mozilla Thunderbird \u003c78.1"
    ]
  },
  "referenceLink": "https://vigilance.fr/vulnerability/Mozilla-Firefox-multiple-vulnerabilities-32927",
  "serverity": "\u4f4e",
  "submitTime": "2020-07-30",
  "title": "Mozilla\u4ee3\u7801\u95ee\u9898\u6f0f\u6d1e"
}

CVE-2020-15658 (GCVE-0-2020-15658)

Vulnerability from cvelistv5

Published

2020-08-10 17:43

Modified

2024-08-04 13:22

Severity ?

CWE

Overriding file type when saving to disk

Summary

The code for downloading files did not properly take care of special characters, which led to an attacker being able to cut off the file ending at an earlier position, leading to a different file type being downloaded than shown in the dialog. This vulnerability affects Firefox ESR < 78.1, Firefox < 79, and Thunderbird < 78.1.

References

▼	URL	Tags
	https://www.mozilla.org/security/advisories/mfsa2020-30/	x_refsource_MISC
	https://www.mozilla.org/security/advisories/mfsa2020-32/	x_refsource_MISC
	https://www.mozilla.org/security/advisories/mfsa2020-33/	x_refsource_MISC
	https://bugzilla.mozilla.org/show_bug.cgi?id=1637745	x_refsource_MISC
	http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00025.html	vendor-advisory, x_refsource_SUSE
	https://usn.ubuntu.com/4443-1/	vendor-advisory, x_refsource_UBUNTU

Impacted products

Vendor

Product

Version

▼

Mozilla

Firefox ESR

Version: unspecified < 78.1

	Mozilla	Firefox	Version: unspecified < 79
	Mozilla	Thunderbird	Version: unspecified < 78.1

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T13:22:30.558Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2020-30/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2020-32/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2020-33/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1637745"
          },
          {
            "name": "openSUSE-SU-2020:1189",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00025.html"
          },
          {
            "name": "USN-4443-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4443-1/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "78.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "79",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "78.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The code for downloading files did not properly take care of special characters, which led to an attacker being able to cut off the file ending at an earlier position, leading to a different file type being downloaded than shown in the dialog. This vulnerability affects Firefox ESR \u003c 78.1, Firefox \u003c 79, and Thunderbird \u003c 78.1."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Overriding file type when saving to disk",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-08-18T13:06:13",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2020-30/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2020-32/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2020-33/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1637745"
        },
        {
          "name": "openSUSE-SU-2020:1189",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00025.html"
        },
        {
          "name": "USN-4443-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4443-1/"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@mozilla.org",
          "ID": "CVE-2020-15658",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Firefox ESR",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "78.1"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Firefox",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "79"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Thunderbird",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "78.1"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Mozilla"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The code for downloading files did not properly take care of special characters, which led to an attacker being able to cut off the file ending at an earlier position, leading to a different file type being downloaded than shown in the dialog. This vulnerability affects Firefox ESR \u003c 78.1, Firefox \u003c 79, and Thunderbird \u003c 78.1."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Overriding file type when saving to disk"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2020-30/",
              "refsource": "MISC",
              "url": "https://www.mozilla.org/security/advisories/mfsa2020-30/"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2020-32/",
              "refsource": "MISC",
              "url": "https://www.mozilla.org/security/advisories/mfsa2020-32/"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2020-33/",
              "refsource": "MISC",
              "url": "https://www.mozilla.org/security/advisories/mfsa2020-33/"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1637745",
              "refsource": "MISC",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1637745"
            },
            {
              "name": "openSUSE-SU-2020:1189",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00025.html"
            },
            {
              "name": "USN-4443-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4443-1/"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2020-15658",
    "datePublished": "2020-08-10T17:43:23",
    "dateReserved": "2020-07-10T00:00:00",
    "dateUpdated": "2024-08-04T13:22:30.558Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted