CVE-2019-17011

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 71 Firefox ESR versions prior to 68.3 Thunderbird versions prior to 68.3

Description The issue is related to an error in extracting a document from DocShell, allowing a remote attacker to access confidential data, compromise its integrity, and cause a denial of service. Under certain conditions, when retrieving a document from a DocShell in the antitracking code, a race condition could cause a use-after-free condition and a potentially exploitable crash.

Recommendations For Firefox versions prior to 71, update to version 71 or later to resolve the issue. For Firefox ESR versions prior to 68.3, update to version 68.3 or later to resolve the issue. For Thunderbird versions prior to 68.3, update to version 68.3 or later to resolve the issue.