USN-4353-1: Firefox vulnerabilities
Multiple security issues were discovered in Firefox. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, bypass security restrictions, spoof the URL bar, or execute arbitrary code. (CVE-2020-6831, CVE-2020-12387, CVE-2020-12390, CVE-2020-12391, CVE-2020-12394, CVE-2020-12395, CVE-2020-12396) It was discovered that the Devtools’ ‘Copy as cURL’ feature did not properly escape the HTTP POST data of a request. If a user were tricked in to using the ‘Copy as cURL’ feature to copy and paste a command with specially crafted data in to a terminal, an attacker could potentially exploit this to obtain sensitive information from local files. (CVE-2020-12392)
Affected Software
Event History
Child vulnerabilities
Contains the following vulnerabilities.
Frequently Asked Questions
What is the severity of USN-4353-1?
The severity of USN-4353-1 is considered high due to potential remote code execution and denial of service risks.
How do I fix USN-4353-1?
To fix USN-4353-1, users should upgrade Firefox to the latest version specified in the Ubuntu security notice.
What impact does USN-4353-1 have on my system?
USN-4353-1 can allow attackers to bypass security restrictions, spoof URLs, and execute arbitrary code, posing significant security risks.
Which versions of Firefox are affected by USN-4353-1?
USN-4353-1 affects multiple versions of Firefox on Ubuntu 16.04, 18.04, 19.10, and 20.04.
Is USN-4353-1 specific to a particular operating system?
Yes, USN-4353-1 specifically affects Firefox running on various versions of the Ubuntu operating system.