EVGA

Update your Firefox or other Browser - security vulnerabilities fix -attacks in the wild

Author
Post
Essentials Only Full Version
Cool GTX
EVGA Forum Moderator
  • Total Posts : 30994
  • Reward points : 0
  • Joined: 2010/12/12 14:22:25
  • Location: Folding for the Greater Good
  • Status: online
  • Ribbons : 122
2020/04/04 06:45:42 (permalink)
  attacks in the wild abusing this flaw 
 Mozilla Foundation Security Advisory 2020-11

Security Vulnerabilities fixed in Firefox 74.0.1 and Firefox ESR 68.6.1

Announced  April 3, 2020Impact  criticalProducts Firefox, Firefox ESRFixed in
  • Firefox 74.0.1
  • Firefox ESR 68.6.1
#CVE-2020-6819: Use-after-free while running the nsDocShell destructorReporterFrancisco Alonso @revskills working with Javier Marcos of @JMPSecImpactcritical
Description
Under certain conditions, when running the nsDocShell destructor, a race condition can cause a use-after-free. We are aware of targeted attacks in the wild abusing this flaw.
References
#CVE-2020-6820: Use-after-free when handling a ReadableStreamReporterFrancisco Alonso @revskills working with Javier Marcos of @JMPSecImpactcritical
Description
Under certain conditions, when handling a ReadableStream, a race condition can cause a use-after-free. We are aware of targeted attacks in the wild abusing this flaw.
References

Learn your way around the EVGA Forums, Rules & limits on new accounts Ultimate Self-Starter Thread For New Members

I am a Volunteer Moderator - not an EVGA employee

 https://foldingathome.org -->become a citizen scientist and contribute your compute power to help fight global health threats

RTX Project EVGA X99 FTWK Nibbler EVGA X99 Classified EVGA 3080Ti FTW3 Ultra


#1
Security Vulnerabilities, Firefox, Vulnerabilities fixed

6 Replies Related Threads
    bdary
    Omnipotent Enthusiast
    • Total Posts : 10331
    • Reward points : 0
    • Joined: 2008/04/25 14:08:16
    • Location: Florida
    • Status: offline
    • Ribbons : 116
    Re: Update your Firefox or other Browser - security vulnerabilities fix -attacks in the wi 2020/04/04 07:06:01 (permalink)
    I noticed my Firefox updated this morning to this latest version...


     
     
     
     
     
     
     
     
     
    #2
    rjohnson11
    EVGA Forum Moderator
    • Total Posts : 102291
    • Reward points : 0
    • Joined: 2004/10/05 12:44:35
    • Location: Netherlands
    • Status: offline
    • Ribbons : 84
    Re: Update your Firefox or other Browser - security vulnerabilities fix -attacks in the wi 2020/04/04 07:49:17 (permalink)
    I'm using Microsoft Edge with Chromium. I stopped using Firefox some time ago. Thanks for this post. 

    AMD Ryzen 9 7950X,  Corsair Mp700 Pro M.2, 64GB Corsair Dominator Titanium DDR5  X670E Steel Legend, MSI RTX 4090 Associate Code: H5U80QBH6BH0AXF. I am NOT an employee of EVGA

    #3
    Bobmitch
    Omnipotent Enthusiast
    • Total Posts : 8328
    • Reward points : 0
    • Joined: 2007/05/07 09:36:29
    • Status: offline
    • Ribbons : 47
    Re: Update your Firefox or other Browser - security vulnerabilities fix -attacks in the wi 2020/04/04 12:08:34 (permalink)
    My  Firefox updated yesterday...

    MSI MAG X670-E Tomahawk;  Ryzen 7 7800X3D; Asus TUF RTX 4070 TI OC; Seasonic Vertex GX-1000 PSU; 32 GB  Corsair Vengeance DDR5-6000 RGB; Corsair iCue Link H150i RGB 360MM AIO; 2-Western Digital Black 4 TB SN850X NVMe; Creative SoundBlaster Z;  Lian Li Lancool III; EVGA Z15 Keyboard; Razer Viper 8K Mouse


    Heatware:  http://www.heatware.com/eval.php?id=72402    Affiliate code: 1L2RV0BNQ6                                          
    Associate Code:  UD82LJP3Y1FIQPR
     


    #4
    XrayMan
    Insert Custom Title Here
    • Total Posts : 73000
    • Reward points : 0
    • Joined: 2006/12/14 22:10:06
    • Location: Santa Clarita, Ca.
    • Status: offline
    • Ribbons : 115
    Re: Update your Firefox or other Browser - security vulnerabilities fix -attacks in the wi 2020/04/04 21:39:29 (permalink)
     
        

                My Affiliate Code: 8WEQVXMCJL
     
            Associate Code: VHKH33QN4W77V6A
     
                 
     
     
                      
     
     
     
              
     
       
     
               
     
     
     
     
     
     
     
     
     
     
     
     
     
     
     



     
     
     
     
     
     &nbsp
    #5
    Hoggle
    EVGA Forum Moderator
    • Total Posts : 10102
    • Reward points : 0
    • Joined: 2003/10/13 22:10:45
    • Location: Eugene, OR
    • Status: offline
    • Ribbons : 4
    Re: Update your Firefox or other Browser - security vulnerabilities fix -attacks in the wi 2020/04/05 02:44:42 (permalink)
    It's really important that people keep up to date on software patches now that so many people are working from home. Normally IT guys would be patching this stuff and now we have to rely on people working from home so of course attacks are going to increase in the wild.

    Use an Associates Code & SAVE 5% - 10% on your purchase. Just click on the associates banner to save, or enter the associates code at checkout on your next purchase. If you choose to use my code I want to personally say "Thank You" for using it. 
     
     
    #6
    z999z3mystorys
    CLASSIFIED Member
    • Total Posts : 4480
    • Reward points : 0
    • Joined: 2008/11/29 06:46:22
    • Location: at my current location
    • Status: offline
    • Ribbons : 23
    Re: Update your Firefox or other Browser - security vulnerabilities fix -attacks in the wi 2020/04/05 03:47:53 (permalink)
    Mine always updates on it's own, never had to do it manually. though that might be because I close it out completely fairly often and it checks every time it starts up.
    I guess for people who leave it open long term it might be a problem.
    #7
    Jump to:
  • Back to Mobile