Mozilla Firefox up to 27 on iOS Unicode RTL Order File Name input validation

Summaryinfo

A vulnerability, which was classified as critical, has been found in Mozilla Firefox up to 27 on iOS. Impacted is an unknown function of the component Unicode RTL Order Handler. The manipulation as part of File Name leads to input validation. This vulnerability is documented as CVE-2020-15651. The attack can be initiated remotely. There is not any exploit available. It is advisable to upgrade the affected component.

Detailsinfo

A vulnerability was found in Mozilla Firefox up to 27 on iOS (Web Browser). It has been rated as critical. This issue affects an unknown functionality of the component Unicode RTL Order Handler. The manipulation as part of a File Name leads to a input validation vulnerability. Using CWE to declare the problem leads to CWE-20. The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly. Impacted is integrity. The summary by CVE is:

A unicode RTL order character in the downloaded file name can be used to change the file's name during the download UI flow to change the file extension. This vulnerability affects Firefox for iOS < 28.

The weakness was released 08/10/2020 as Bug 1649160 as not defined bug report (Bugzilla). The advisory is shared at bugzilla.mozilla.org. The identification of this vulnerability is CVE-2020-15651 since 07/10/2020. The attack may be initiated remotely. No form of authentication is needed for a successful exploitation. It demands that the victim is doing some kind of user interaction. Neither technical details nor an exploit are publicly available. The price for an exploit might be around USD $0-$5k at the moment (estimation calculated on 08/11/2020).

Upgrading to version 28 eliminates this vulnerability.

Entry connected to this vulnerability is available at VDB-159457. If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Productinfo

Type

• Web Browser

Vendor

• Mozilla

Name

• Firefox

Version

• 27

License

• open-source

Website

• Vendor: https://www.mozilla.org/
• Product: https://www.mozilla.org/en-US/firefox/

CPE 2.3info

• 🔍

CPE 2.2info

• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Discussion