CVE-2020-6807

State: Published
Severity: Not scored
Published: Mar 25, 2020
Updated: Aug 4, 2024
Reserved: Jan 10, 2020

Description

When a device was changed while a stream was about to be destroyed, the <code>stream-reinit</code> task may have been executed after the stream was destroyed, causing a use-after-free and a potentially exploitable crash. This vulnerability affects Thunderbird < 68.6, Firefox < 74, Firefox < ESR68.6, and Firefox ESR < 68.6.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
ThunderbirdMozilla	before 68.6Affected
FirefoxMozilla	before 74Affected before ESR68.6Affected
Firefox ESRMozilla	before 68.6Affected

References

https://www.mozilla.org/security/advisories/mfsa2020-08/
https://www.mozilla.org/security/advisories/mfsa2020-10/
https://www.mozilla.org/security/advisories/mfsa2020-09/
https://bugzilla.mozilla.org/show_bug.cgi?id=1614971
USN-4328-1vendor-advisory
USN-4335-1vendor-advisory

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.