CVE-2020-15658

Reference Links

• https://bugzilla.mozilla.org/show_bug.cgi?id=1637745
• https://www.mozilla.org/en-US/security/advisories/mfsa2020-32/
• https://www.mozilla.org/security/advisories/mfsa2020-30/
• https://www.mozilla.org/security/advisories/mfsa2020-32/
• https://www.mozilla.org/security/advisories/mfsa2020-33/
• http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00025.html
• https://usn.ubuntu.com/4443-1/
• https://launchpad.net/bugs/cve/CVE-2020-15658
• https://www.mozilla.org/en-US/security/advisories/mfsa2020-32/#CVE-2020-15653
• https://www.mozilla.org/en-US/security/advisories/mfsa2020-33/
• https://www.mozilla.org/en-US/security/advisories/mfsa2020-30/
• https://www.mozilla.org/en-US/security/advisories/mfsa2020-32/#CVE-2020-15658
• https://www.mozilla.org/en-US/security/advisories/mfsa2020-33/#CVE-2020-15658
• https://security-tracker.debian.org/tracker/CVE-2020-15658
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15658
• https://nvd.nist.gov/vuln/detail/CVE-2020-15658
• https://ubuntu.com/security/CVE-2020-15658

Parent vulnerabilities

(Appears in the following advisories)

• MFSA2020-32
• MFSA2020-33
• MFSA2020-30

Peer vulnerabilities

(Found alongside the following vulnerabilities)

• CVE-2020-15652
• CVE-2020-6514
• CVE-2020-15655
• CVE-2020-15653
• CVE-2020-6463
• CVE-2020-15656
• CVE-2020-15658
• CVE-2020-15657
• CVE-2020-15654
• CVE-2020-15659

Frequently Asked Questions

• What is the severity of CVE-2020-15658?

  The severity of CVE-2020-15658 is low.

• Which software products are affected by CVE-2020-15658?

  Mozilla Firefox ESR versions up to 78.1, Mozilla Thunderbird versions up to 78.1, and Mozilla Firefox versions up to 79 are affected by CVE-2020-15658.

• How can an attacker exploit CVE-2020-15658?

  An attacker can exploit CVE-2020-15658 by cutting off the file ending at an earlier position during a file download, leading to a different file type being downloaded than shown in the dialog.

• Is there a solution for CVE-2020-15658?

  Yes, updating Mozilla Firefox ESR to version 78.1 or later, Mozilla Thunderbird to version 78.1 or later, and Mozilla Firefox to version 79 or later will fix CVE-2020-15658.

• Where can I find more information about CVE-2020-15658?

  More information about CVE-2020-15658 can be found at the following references: [Mozilla Bugzilla](https://bugzilla.mozilla.org/show_bug.cgi?id=1637745), [Mozilla Security Advisory](https://www.mozilla.org/en-US/security/advisories/mfsa2020-33/), [Mozilla Security Advisory](https://www.mozilla.org/en-US/security/advisories/mfsa2020-30/).