CVE-2020-12625

Description

References

• lists.opensuse.org/opensuse-security-announce/2020-09/msg00083.html · Third Party Advisory
• DrunkenShells/Disclosures · Exploit
• roundcube/roundcubemail commit 87e4cd0 · Patch
• roundcube/roundcubemail · Patch
• roundcube/roundcubemail release 1.4.4 · Third Party Advisory
• security.gentoo.org/glsa/202007-41 · Third Party Advisory
• debian.org/security/2020/dsa-4674 · Third Party Advisory

Weitere Schwachstellen in backports sle

• CVE-2020-6557MITTEL 6.5Inappropriate implementation in networking in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to perform domain spoofing via a…
• CVE-2020-16011KRITISCH 9.6Heap buffer overflow in UI in Google Chrome on Windows prior to 86.0.4240.183 allowed a remote attacker who had compromised the renderer pro…
• CVE-2020-16009HOCH 8.8EXPLOITED (CISA KEV)Inappropriate implementation in V8 in Google Chrome prior to 86.0.4240.183 allowed a remote attacker to potentially exploit heap corruption …
• CVE-2020-16008HOCH 8.8Stack buffer overflow in WebRTC in Google Chrome prior to 86.0.4240.183 allowed a remote attacker to potentially exploit stack corruption vi…
• CVE-2020-16007HOCH 7.8Insufficient data validation in installer in Google Chrome prior to 86.0.4240.183 allowed a local attacker to potentially elevate privilege …