TI-2019-12695 CVE-2019-17012 · GHSA-q2gm-8f48-27f9
Out-of-bounds write in Mozilla Thunderbird
Priority MEDIUM 42
Mozilla developers reported memory safety bugs present in Firefox 70 and Firefox ESR 68.2.
RHSA-2019:4107
firefox security update
Released 2019-12-05 · Red Hat rating Critical · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) firefox-68.3.0-1.el7_7
- Red Hat Enterprise Linux Client Optional (v. 7) firefox-68.3.0-1.el7_7
- Red Hat Enterprise Linux Server (v. 7) firefox-68.3.0-1.el7_7
- Red Hat Enterprise Linux Server Optional (v. 7) firefox-68.3.0-1.el7_7
- Red Hat Enterprise Linux Workstation (v. 7) firefox-68.3.0-1.el7_7
- Red Hat Enterprise Linux Workstation Optional (v. 7) firefox-68.3.0-1.el7_7
Fixes 5 records
TI-2019-12691 CVE-2019-17008 · GHSA-vm87-9hjc-x68w
Use after free in Mozilla Thunderbird
Priority MEDIUM 42
When using nested workers, a use-after-free could occur during worker destruction.
TI-2019-12688 CVE-2019-17005 · GHSA-p5rh-pvj2-8vfv
Out-of-bounds write in Mozilla Thunderbird
Priority MEDIUM 42
The plain text serializer used a fixed-size array for the number of <ol> elements it could process; however it was possible to overflow the static-sized array leading to memory corruption and a potentially exploitable cr…
TI-2019-12694 CVE-2019-17011 · GHSA-qqwr-j46x-f6mj
Race condition in Mozilla Thunderbird
Priority LOW 36
Under certain conditions, when retrieving a document from a DocShell in the antitracking code, a race condition could cause a use-after-free condition and a potentially exploitable crash.
TI-2019-12693 CVE-2019-17010 · GHSA-3f69-xhq6-c8m8
Race condition in Mozilla Thunderbird
Priority LOW 36
Under certain conditions, when checking the Resist Fingerprinting preference during device orientation checks, a race condition could have caused a use-after-free and a potentially exploitable crash.