CVE-2019-11693

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 67 Firefox ESR versions prior to 60.7 Thunderbird versions prior to 60.7

Description The bufferdata function in WebGL is vulnerable to a buffer overflow with specific graphics drivers on Linux, potentially allowing a remote attacker to access confidential data, compromise data integrity, and cause a denial of service. This issue could result in malicious content freezing a tab or triggering a potentially exploitable crash. The issue only occurs on Linux, and other operating systems are unaffected.

Recommendations For Firefox versions prior to 67, update to version 67 or later. For Firefox ESR versions prior to 60.7, update to version 60.7 or later. For Thunderbird versions prior to 60.7, update to version 60.7 or later.