CVE-2019-17008
08.01.2020, 22:15
When using nested workers, a use-after-free could occur during worker destruction. This resulted in a potentially exploitable crash. This vulnerability affects Thunderbird < 68.3, Firefox ESR < 68.3, and Firefox < 71.Enginsight
Vendor | Product | Version |
---|---|---|
mozilla | firefox | 𝑥 < 71.0 |
mozilla | firefox_esr | 𝑥 < 68.3 |
mozilla | thunderbird | 𝑥 < 68.3 |
opensuse | leap | 15.1 |
𝑥
= Vulnerable software versions

Debian Releases
Debian Product | |||||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|---|---|
firefox |
| ||||||||||||
firefox-esr |
| ||||||||||||
thunderbird |
|

Ubuntu Releases
Ubuntu Product | |||||||||||||||||||||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
firefox |
| ||||||||||||||||||||||||||||
mozjs38 |
| ||||||||||||||||||||||||||||
mozjs52 |
| ||||||||||||||||||||||||||||
mozjs60 |
| ||||||||||||||||||||||||||||
thunderbird |
|
Common Weakness Enumeration
References