Riskcovery

CVE-2020-6797

State
Published
Severity
Not scored
Published
Mar 2, 2020
Updated
Aug 4, 2024
Reserved
Jan 10, 2020

Read the record on cve.org

Description

By downloading a file with the .fileloc extension, a semi-privileged extension could launch an arbitrary application on the user's computer. The attacker is restricted as they are unable to download non-quarantined files or supply command line arguments to the application, limiting the impact. Note: this issue only occurs on Mac OSX. Other operating systems are unaffected. This vulnerability affects Thunderbird < 68.5, Firefox < 73, and Firefox < ESR68.5.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
ThunderbirdMozilla
  • before 68.5Affected
FirefoxMozilla
  • before 73Affected
  • before ESR68.5Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.