PT-2019-1905
CVE-2019-9792
·
تاريخ النشر
2019-03-19
·
تاريخ التحديث
2024-12-12
الوصف من
CVSS 3.1
9.8
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Firefox versions prior to 66
Firefox ESR versions prior to 60.6
Thunderbird versions prior to 60.6
Description
The IonMonkey just-in-time (JIT) compiler can leak an internal JS OPTIMIZED OUT magic value to the running script during a bailout, which can be used by JavaScript to achieve memory corruption, resulting in a potentially exploitable crash. The vulnerability is related to a buffer overflow and memory corruption issue.
Recommendations
For Firefox versions prior to 66, update to version 66 or later.
For Firefox ESR versions prior to 60.6, update to version 60.6 or later.
For Thunderbird versions prior to 60.6, update to version 60.6 or later.
قابلية الاستغلال
استغلال
إصلاح
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾