logo

CVE-2019-11707 - Mozilla Firefox and Thunderbird Type Confusion Vulnerability

Project:Mozilla

Product:Firefox and Thunderbird

Date Added:2022-05-23Due Date:2022-06-13

Vulnerability Name

Mozilla Firefox and Thunderbird Type Confusion Vulnerability

Description

Mozilla Firefox and Thunderbird contain a type confusion vulnerability that can occur when manipulating JavaScript objects due to issues in Array.pop, allowing for an exploitable crash.

Known To Be Used in Ransomware Campaigns?

Unknown

Action

Apply updates per vendor instructions.

Additional Notes

https://nvd.nist.gov/vuln/detail/CVE-2019-11707