PT-2019-4612
CVE-2019-9796
·
تاريخ النشر
2019-03-19
·
تاريخ التحديث
2026-10-31
الوصف من
CVSS 3.1
9.8
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Thunderbird versions prior to 60.6
Firefox ESR versions prior to 60.6
Firefox versions prior to 66
Description
A use-after-free issue occurs due to the SMIL animation controller incorrectly registering with the refresh driver twice. This leaves a dangling pointer to the driver's observer array when the animation controller element is removed, potentially allowing a remote attacker to gain unauthorized access to information and compromise its integrity.
Recommendations
For Thunderbird versions prior to 60.6, update to version 60.6 or later.
For Firefox ESR versions prior to 60.6, update to version 60.6 or later.
For Firefox versions prior to 66, update to version 66 or later.
قابلية الاستغلال
استغلال
إصلاح
التأثيرات
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾