CVE-2019-17017

Name of the Vulnerable Software and Affected Versions Firefox ESR versions prior to 68.4 Firefox versions prior to 72

Description A type confusion vulnerability could occur due to a missing case handling object types, resulting in a crash. It is presumed that with enough effort, this issue could be exploited to run arbitrary code, potentially allowing a remote attacker to access confidential data, compromise its integrity, and cause a denial of service.

Recommendations For Firefox ESR versions prior to 68.4, update to version 68.4 or later. For Firefox versions prior to 72, update to version 72 or later.