Not rated
CVE-2019-11759 An attacker could have caused 4 bytes of HMAC output to be written past the end of a buffer stored on the stack
Description
An attacker could have caused 4 bytes of HMAC output to be written past the end of a buffer stored on the stack. This could be used by an attacker to execute arbitrary code or more likely lead to a crash. This vulnerability affects Firefox < 70, Thunderbird < 68.2, and Firefox ESR < 68.2.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Firefox | Versions not published | |
| Thunderbird | Versions not published | |
| Firefox ESR | Versions not published |