CVE-2019-17021
08.01.2020, 22:15
During the initialization of a new content process, a race condition occurs that can allow a content process to disclose heap addresses from the parent process. *Note: this issue only occurs on Windows. Other operating systems are unaffected.*. This vulnerability affects Firefox ESR < 68.4 and Firefox < 72.
| Vendor | Product | Version |
|---|---|---|
| mozilla | firefox | 𝑥 < 72.0 |
| mozilla | firefox_esr | 𝑥 < 68.4 |
| opensuse | leap | 15.1 |
𝑥
= Vulnerable software versions
Debian Releases
Debian Product | |||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| firefox |
| ||||||||||||
| firefox-esr |
| ||||||||||||
| thunderbird |
|
Ubuntu Releases
Ubuntu Product | |||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| firefox |
| ||||||||||||||||||||||||||||
| mozjs38 |
| ||||||||||||||||||||||||||||
| mozjs52 |
| ||||||||||||||||||||||||||||
| mozjs60 |
| ||||||||||||||||||||||||||||
| thunderbird |
|
References