Security Alert (A20-08-06): Multiple Vulnerabilities in Firefox
26 August 2020
Mozilla has published three security advisories (MFSA 2020-36, MFSA 2020-37 and MFSA 2020-38) to address multiple vulnerabilities in Firefox browser. A local attacker may replace the Mozilla Maintenance Service executable with a vulnerable version. A remote attacker could also entice a user running a vulnerable browser to visit a web page with specially crafted content to exploit the vulnerabilities.
Firefox ESR prior to version 68.12
Firefox ESR prior to version 78.2
Firefox prior to version 80
Successful exploitation of the vulnerabilities could lead to arbitrary code execution, information disclosure, escalation of privilege, security restriction bypass or installation of malicious extension on an affected system.
Mozilla has released new versions of the product to address the issues and they can be downloaded at the following URLs:
Firefox 80 for Windows, Macintosh and Linux https://www.mozilla.org/en-US/firefox/all/
Firefox ESR 68.12 and 78.2 for Windows, Macintosh and Linux https://www.mozilla.org/en-US/firefox/organizations/all/
Users of affected systems should follow the recommendations provided by the product vendor and take immediate actions to mitigate the risk.