Severity
High
Analysis Summary
CVE-2020-16044
Mozilla Firefox could allow a remote attacker to execute arbitrary code on the system, caused by a use-after-free write when handling a malicious COOKIE-ECHO SCTP chunk. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability using to execute arbitrary code on the vulnerable system or cause a denial of service.
Impact
- Denial of service
- Code Execution
Affected Vendors
Mozilla
Affected Products
- Mozilla Firefox 84.0.1
- Mozilla Firefox for Android 84.1.2
- Mozilla Firefox ESR 78.6.0
Remediation
Refer to Mozilla Foundation Security Advisory 2021-01 for patch, upgrade or suggested workaround information.