Mozilla Firefox/Firefox ESR/Thunderbird on Windows DLL uncontrolled search path

Summaryinfo

A vulnerability was found in Mozilla Firefox, Firefox ESR and Thunderbird on Windows. It has been rated as critical. Affected by this vulnerability is an unknown functionality of the component DLL Handler. The manipulation leads to uncontrolled search path. This vulnerability is uniquely identified as CVE-2020-15657. The attack is possible to be carried out remotely. No exploit exists. Upgrading the affected component is advised.

Detailsinfo

A vulnerability was found in Mozilla Firefox, Firefox ESR and Thunderbird on Windows (Web Browser) (version unknown) and classified as critical. This issue affects an unknown function of the component DLL Handler. The manipulation with an unknown input leads to a uncontrolled search path vulnerability. Using CWE to declare the problem leads to CWE-427. The product uses a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors. Impacted is confidentiality, integrity, and availability. The summary by CVE is:

Firefox could be made to load attacker-supplied DLL files from the installation directory. This required an attacker that is already capable of placing files in the installation directory. *Note: This issue only affected Windows operating systems. Other operating systems are unaffected.*. This vulnerability affects Firefox ESR < 78.1, Firefox < 79, and Thunderbird < 78.1.

The weakness was disclosed 08/10/2020 as Bug 1644954 as not defined bug report (Bugzilla). It is possible to read the advisory at bugzilla.mozilla.org. The identification of this vulnerability is CVE-2020-15657 since 07/10/2020. The attack may be initiated remotely. The successful exploitation requires a simple authentication. The technical details are unknown and an exploit is not publicly available. The pricing for an exploit might be around USD $0-$5k at the moment (estimation calculated on 08/11/2020). The attack technique deployed by this issue is T1574 according to MITRE ATT&CK.

Upgrading eliminates this vulnerability.

The entries VDB-159469, VDB-159468, VDB-159466 and VDB-159465 are pretty similar. Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Productinfo

Type

• Web Browser

Vendor

• Mozilla

Name

• Firefox
• Firefox ESR
• Thunderbird

License

• open-source

Website

• Vendor: https://www.mozilla.org/
• Product: https://www.mozilla.org/en-US/firefox/

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Discussion