First published: Tue Jun 02 2020(Updated: )
Last updated 24 July 2024
Credit: security@mozilla.org
Affected Software | Affected Version | How to fix |
---|---|---|
Firefox | <77.0 | |
Firefox ESR | <68.9.0 | |
Thunderbird | <68.9.0 | |
Ubuntu | =16.04 | |
Ubuntu | =18.04 | |
Ubuntu | =19.10 | |
Ubuntu | =20.04 | |
Thunderbird | <68.9 | 68.9 |
Firefox | <77 | 77 |
Firefox ESR | <68.9 | 68.9 |
debian/firefox | 136.0.3-1 | |
debian/firefox-esr | 115.14.0esr-1~deb11u1 128.8.0esr-1~deb11u1 128.8.0esr-1~deb12u1 128.8.0esr-1 | |
debian/thunderbird | 1:115.12.0-1~deb11u1 1:128.8.0esr-1~deb11u1 1:128.8.0esr-1~deb12u1 1:128.8.0esr-1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
(Found alongside the following vulnerabilities)
CVE-2020-12406 is a vulnerability discovered in Mozilla Thunderbird, Firefox, and Firefox ESR that could lead to a crash or potentially allow an attacker to run arbitrary code.
CVE-2020-12406 affects Mozilla Thunderbird version up to 68.9, Firefox version up to 77, and Firefox ESR version up to 68.9.
CVE-2020-12406 has a severity level of high (severity value: 7).
With enough effort, CVE-2020-12406 could be exploited to run arbitrary code.
To fix CVE-2020-12406, update Mozilla Thunderbird to version 68.9 or newer, Firefox to version 77 or newer, or Firefox ESR to version 68.9 or newer.