CVE-2020-6797 — Improper Input Validation in Mozilla Firefox

CWE-20 — Improper Input ValidationCWE-250 — Execution with Unnecessary Privileges11 documents8 sources
Severity
4.3MEDIUMNVD
EPSS
1.0%
top 22.74%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Mozilla FirefoxMozilla ThunderbirdMozilla Firefox ESR
Timeline
PublishedMar 2
Latest updateMay 24

Description

By downloading a file with the .fileloc extension, a semi-privileged extension could launch an arbitrary application on the user's computer. The attacker is restricted as they are unable to download non-quarantined files or supply command line arguments to the application, limiting the impact. Note: this issue only occurs on Mac OSX. Other operating systems are unaffected. This vulnerability affects Thunderbird < 68.5, Firefox < 73, and Firefox < ESR68.5.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:NExploitability: 2.8 | Impact: 1.4

Affected Packages5 packages

▶CVEListV5mozilla/firefoxunspecified — 73+1
▶NVDmozilla/firefox< 73.0
▶NVDmozilla/firefox_esr< 68.5.0
▶CVEListV5mozilla/thunderbirdunspecified — 68.5
▶NVDmozilla/thunderbird< 68.5.0

🔴Vulnerability Details

2
GHSA
GHSA-x22j-8886-rjmh: By downloading a file with the↗2022-05-24
▶
CVEList
CVE-2020-6797: By downloading a file with the↗2020-03-02
▶

📋Vendor Advisories

5
Red Hat
Mozilla: Extensions granted downloads.open permission could open arbitrary applications on Mac OSX↗2020-02-11
▶
Debian
CVE-2020-6797: firefox - By downloading a file with the .fileloc extension, a semi-privileged extension c...↗2020
▶
Mozilla
Mozilla Foundation Security Advisory 2020-07: CVE-2020-6797↗
▶
Mozilla
Mozilla Foundation Security Advisory 2020-06: CVE-2020-6797↗
▶
Mozilla
Mozilla Foundation Security Advisory 2020-05: CVE-2020-6797↗
▶

💬Community

3
Bugzilla
Browser API can lead to 'one click' Remote Code Execution↗2021-10-02
▶
HackerOne
Uncovering file quarantine and UX security issues in macOS apps ( .terminal, .fileloc and .url)↗2021-07-23
▶
Bugzilla
CVE-2020-6797 Mozilla: Extensions granted downloads.open permission could open arbitrary applications on Mac OSX↗2020-02-11
▶
CVE-2020-6797 — Improper Input Validation in Mozilla | cvebase