TI-2019-12709 CVE-2019-17026 · GHSA-9m3f-27xq-x4j5
Type confusion in Mozilla Firefox ESR
Priority CRITICAL 97KEV
Incorrect alias information in IonMonkey JIT compiler for setting array elements could lead to a type confusion.
RHSA-2020:0085
firefox security update
Released 2020-01-13 · Red Hat rating Critical · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) firefox-68.4.1-1.el7_7
- Red Hat Enterprise Linux Client Optional (v. 7) firefox-68.4.1-1.el7_7
- Red Hat Enterprise Linux Server (v. 7) firefox-68.4.1-1.el7_7
- Red Hat Enterprise Linux Server Optional (v. 7) firefox-68.4.1-1.el7_7
- Red Hat Enterprise Linux Workstation (v. 7) firefox-68.4.1-1.el7_7
- Red Hat Enterprise Linux Workstation Optional (v. 7) firefox-68.4.1-1.el7_7
Fixes 5 records
TI-2019-12707 CVE-2019-17024 · GHSA-r596-hj6g-g56c
Out-of-bounds write in Mozilla Firefox ESR
Priority MEDIUM 43
Mozilla developers reported memory safety bugs present in Firefox 71 and Firefox ESR 68.3.
TI-2019-12700 CVE-2019-17017 · GHSA-6m7f-wqg6-qgm2
Type confusion in Mozilla Firefox ESR
Priority MEDIUM 43
Due to a missing case handling object types, a type confusion vulnerability could occur, resulting in a crash.
TI-2019-12705 CVE-2019-17022 · GHSA-wgfq-5c99-wv2w
Cross-site scripting in Mozilla Firefox ESR
Priority LOW 31
When pasting a <style> tag from the clipboard into a rich text editor, the CSS sanitizer does not escape < and > characters.
TI-2019-12699 CVE-2019-17016 · GHSA-w7r7-7cjm-rq4q
Cross-site scripting in Mozilla Firefox ESR
Priority LOW 31
When pasting a <style> tag from the clipboard into a rich text editor, the CSS sanitizer incorrectly rewrites a @namespace rule.