Aller au contenu
Non notée

CVE-2019-9791 The type inference system allows the compilation of functions that can cause type confusions between arbitrary objects…

Description

The type inference system allows the compilation of functions that can cause type confusions between arbitrary objects when compiled through the IonMonkey just-in-time (JIT) compiler and when the constructor function is entered through on-stack replacement (OSR). This allows for possible arbitrary reading and writing of objects during an exploitable crash. This vulnerability affects Thunderbird < 60.6, Firefox ESR < 60.6, and Firefox < 66.

Produits et versions touchés

Produit Versions touchées Corrigé en
Thunderbird 60.6 premières → < 60.6 60.6
Firefox ESR 60.6 premières → < 60.6 60.6
Firefox 66 premières → < 66 66
Les 1713 CVE de Thunderbird →
Suivre cette CVE