Описание
A type confusion vulnerability can occur when manipulating JavaScript objects due to issues in Array.pop. This can allow for an exploitable crash. We are aware of targeted attacks in the wild abusing this flaw. This vulnerability affects Firefox ESR < 60.7.1, Firefox < 67.0.3, and Thunderbird < 60.7.2.
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | released | 67.0.3+build1-0ubuntu0.18.04.1 |
| cosmic | released | 67.0.3+build1-0ubuntu0.18.10.1 |
| devel | released | 67.0.3+build1-0ubuntu1 |
| disco | released | 67.0.3+build1-0ubuntu0.19.04.1 |
| eoan | released | 67.0.3+build1-0ubuntu1 |
| esm-infra-legacy/trusty | DNE | |
| esm-infra/focal | DNE | |
| focal | released | 67.0.3+build1-0ubuntu1 |
| groovy | released | 67.0.3+build1-0ubuntu1 |
| hirsute | released | 67.0.3+build1-0ubuntu1 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | not-affected | PoC does not cause crash |
| cosmic | DNE | |
| devel | DNE | |
| disco | DNE | |
| eoan | DNE | |
| esm-apps/bionic | not-affected | PoC does not cause crash |
| esm-infra-legacy/trusty | DNE | |
| esm-infra/focal | DNE | |
| focal | DNE | |
| groovy | DNE |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | ignored | end of standard support, was needed |
| cosmic | ignored | end of life |
| devel | DNE | |
| disco | ignored | end of life |
| eoan | ignored | end of life |
| esm-apps/focal | ignored | |
| esm-infra-legacy/trusty | DNE | |
| esm-infra/bionic | ignored | |
| focal | ignored | |
| groovy | ignored | end of life |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | DNE | |
| cosmic | ignored | end of life |
| devel | DNE | |
| disco | ignored | end of life |
| eoan | ignored | end of life |
| esm-infra-legacy/trusty | DNE | |
| esm-infra/focal | DNE | |
| focal | DNE | |
| groovy | DNE | |
| hirsute | DNE |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | released | 1:60.7.2+build1-0ubuntu0.18.04.1 |
| cosmic | released | 1:60.7.2+build1-0ubuntu0.18.10.1 |
| devel | released | 1:60.7.2+build1-0ubuntu1 |
| disco | released | 1:60.7.2+build1-0ubuntu0.19.04.1 |
| eoan | released | 1:60.7.2+build1-0ubuntu1 |
| esm-infra-legacy/trusty | DNE | |
| esm-infra/focal | DNE | |
| focal | released | 1:60.7.2+build1-0ubuntu1 |
| groovy | released | 1:60.7.2+build1-0ubuntu1 |
| hirsute | released | 1:60.7.2+build1-0ubuntu1 |
Показывать по
EPSS
7.5 High
CVSS2
8.8 High
CVSS3
Связанные уязвимости
A type confusion vulnerability can occur when manipulating JavaScript objects due to issues in Array.pop. This can allow for an exploitable crash. We are aware of targeted attacks in the wild abusing this flaw. This vulnerability affects Firefox ESR < 60.7.1, Firefox < 67.0.3, and Thunderbird < 60.7.2.
A type confusion vulnerability can occur when manipulating JavaScript objects due to issues in Array.pop. This can allow for an exploitable crash. We are aware of targeted attacks in the wild abusing this flaw. This vulnerability affects Firefox ESR < 60.7.1, Firefox < 67.0.3, and Thunderbird < 60.7.2.
A type confusion vulnerability can occur when manipulating JavaScript ...
EPSS
7.5 High
CVSS2
8.8 High
CVSS3