Vulnerability CVE-2019-11764: Information

Description

Mozilla developers and community members reported memory safety bugs present in Firefox 69 and Firefox ESR 68.1. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could be exploited to run arbitrary code. This vulnerability affects Firefox < 70, Thunderbird < 68.2, and Firefox ESR < 68.2.

Severity: HIGH (8.8) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

URL: https://nvd.nist.gov/vuln/detail/CVE-2019-11764
Published: Jan. 9, 2020
Modified: Jan. 1, 2022
Error type identifier: CWE-787

Fixed packages

Package name
Branch
Fixed in version
Version from repository
Errata ID
Task #
State
firefoxsisyphus70.0.1-alt1126.0.1-alt1ALT-PU-2019-3087-1240250Fixed
firefoxp1070.0.1-alt1118.0.2-alt0.p10.1ALT-PU-2019-3087-1240250Fixed
firefoxp972.0.2-alt0.1.p9105.0.1-alt0.c9.1ALT-PU-2020-1617-1245893Fixed
firefoxc10f170.0.1-alt1112.0.2-alt0.p10.1ALT-PU-2019-3087-1240250Fixed
firefoxc9f272.0.2-alt0.1.p9105.0.1-alt0.c9.1ALT-PU-2020-1617-1245893Fixed
firefoxp1170.0.1-alt1126.0.1-alt1ALT-PU-2019-3087-1240250Fixed
firefox-esrsisyphus68.2.0-alt1115.11.0-alt1ALT-PU-2019-3056-1239816Fixed
firefox-esrp1068.2.0-alt1115.11.0-alt1ALT-PU-2019-3056-1239816Fixed
firefox-esrp968.2.0-alt1102.11.0-alt0.c9.1ALT-PU-2019-3106-1240257Fixed
firefox-esrp868.2.0-alt0.M80P.168.4.1-alt0.M80P.1ALT-PU-2019-3218-1242089Fixed
firefox-esrc10f168.2.0-alt1115.9.1-alt0.c10.1ALT-PU-2019-3056-1239816Fixed
firefox-esrc9f278.7.1-alt0.1.c9102.12.0-alt0.c9.1ALT-PU-2021-1368-1264611Fixed
firefox-esrp1168.2.0-alt1115.11.0-alt1ALT-PU-2019-3056-1239816Fixed
thunderbirdsisyphus68.4.2-alt1115.9.0-alt1ALT-PU-2020-1166-1243898Fixed
thunderbirdp1068.4.2-alt1115.9.0-alt1ALT-PU-2020-1166-1243898Fixed
thunderbirdp968.6.0-alt1102.11.0-alt0.c9.1ALT-PU-2020-1515-1245787Fixed
thunderbirdc10f168.4.2-alt1115.9.0-alt0.c10.1ALT-PU-2020-1166-1243898Fixed
thunderbirdc9f268.6.0-alt1102.11.0-alt0.c9.1ALT-PU-2020-1515-1245787Fixed
thunderbirdp1168.4.2-alt1115.9.0-alt1ALT-PU-2020-1166-1243898Fixed

References to Advisories, Solutions, and Tools

Hyperlink
Resource
https://www.mozilla.org/security/advisories/mfsa2019-35/
  • Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2019-34/
  • Vendor Advisory
https://bugzilla.mozilla.org/buglist.cgi?bug_id=1558522%2C1577061%2C1548044%2C1571223%2C1573048%2C1578933%2C1575217%2C1583684%2C1586845%2C1581950%2C1583463%2C1586599
  • Exploit
  • Issue Tracking
  • Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2019-33/
  • Vendor Advisory
GLSA-202003-10
  • Third Party Advisory
USN-4335-1
  • Third Party Advisory

    1. Configuration 1

      cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*
      End excliding
      68.2
      cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*
      End excliding
      68.2
      cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*
      End excliding
      70.0

      Configuration 2

      cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*
VKontakte|Telegram|YouTube|Forum|GitHub|Bugzilla
Version: v24.5.3
Back to top