ByteOS Network

NVD Vulnerability Details :

CVE-2019-11764

Analyzed

Source-security@mozilla.org

Published At-08 Jan, 2020 | 21:15

Updated At-01 Jan, 2022 | 20:02

Mozilla developers and community members reported memory safety bugs present in Firefox 69 and Firefox ESR 68.1. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could be exploited to run arbitrary code. This vulnerability affects Firefox < 70, Thunderbird < 68.2, and Firefox ESR < 68.2.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	8.8	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Primary	2.0	6.8	MEDIUM	AV:N/AC:M/Au:N/C:P/I:P/A:P

CPE Matches

Mozilla Corporation

>>firefox>>Versions before 70.0(exclusive)

cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*

Mozilla Corporation

>>firefox_esr>>Versions before 68.2(exclusive)

cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*

Mozilla Corporation

>>thunderbird>>Versions before 68.2(exclusive)

cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*

Canonical Ltd.

>>ubuntu_linux>>16.04

cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-787	Primary	nvd@nist.gov

References

Hyperlink	Source	Resource
https://bugzilla.mozilla.org/buglist.cgi?bug_id=1558522%2C1577061%2C1548044%2C1571223%2C1573048%2C1578933%2C1575217%2C1583684%2C1586845%2C1581950%2C1583463%2C1586599	security@mozilla.org	Exploit Issue Tracking Vendor Advisory
https://security.gentoo.org/glsa/202003-10	security@mozilla.org	Third Party Advisory
https://usn.ubuntu.com/4335-1/	security@mozilla.org	Third Party Advisory
https://www.mozilla.org/security/advisories/mfsa2019-33/	security@mozilla.org	Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2019-34/	security@mozilla.org	Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2019-35/	security@mozilla.org	Vendor Advisory

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History