Описание
It is possible to delete an IndexedDB key value and subsequently try to extract it during conversion. This results in a use-after-free and a potentially exploitable crash. This vulnerability affects Firefox < 69, Thunderbird < 68.1, Thunderbird < 60.9, Firefox ESR < 60.9, and Firefox ESR < 68.1.
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | released | 69.0+build2-0ubuntu0.18.04.1 |
| devel | released | 69.0.1+build1-0ubuntu2 |
| disco | released | 69.0+build2-0ubuntu0.19.04.1 |
| eoan | released | 69.0.1+build1-0ubuntu2 |
| esm-infra-legacy/trusty | DNE | |
| esm-infra/focal | DNE | |
| focal | released | 69.0.1+build1-0ubuntu2 |
| groovy | released | 69.0.1+build1-0ubuntu2 |
| hirsute | released | 69.0.1+build1-0ubuntu2 |
| impish | released | 69.0.1+build1-0ubuntu2 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | ignored | end of standard support, was needs-triage |
| devel | DNE | |
| disco | DNE | |
| eoan | DNE | |
| esm-apps/bionic | ignored | |
| esm-infra-legacy/trusty | DNE | |
| esm-infra/focal | DNE | |
| focal | DNE | |
| groovy | DNE | |
| hirsute | DNE |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | ignored | end of standard support, was needs-triage |
| devel | DNE | |
| disco | ignored | end of life |
| eoan | ignored | end of life |
| esm-apps/focal | ignored | |
| esm-infra-legacy/trusty | DNE | |
| esm-infra/bionic | ignored | |
| focal | ignored | |
| groovy | ignored | end of life |
| hirsute | DNE |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | DNE | |
| devel | DNE | |
| disco | ignored | end of life |
| eoan | ignored | end of life |
| esm-infra-legacy/trusty | DNE | |
| esm-infra/focal | DNE | |
| focal | DNE | |
| groovy | DNE | |
| hirsute | DNE | |
| impish | DNE |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | released | 1:60.9.0+build1-0ubuntu0.18.04.1 |
| devel | released | 1:68.1.0+build3-0ubuntu1 |
| disco | released | 1:60.9.0+build1-0ubuntu0.19.04.1 |
| eoan | released | 1:68.1.0+build3-0ubuntu1 |
| esm-infra-legacy/trusty | DNE | |
| esm-infra/focal | DNE | |
| focal | released | 1:68.1.0+build3-0ubuntu1 |
| groovy | released | 1:68.1.0+build3-0ubuntu1 |
| hirsute | released | 1:68.1.0+build3-0ubuntu1 |
| impish | released | 1:68.1.0+build3-0ubuntu1 |
Показывать по
Ссылки на источники
EPSS
9.3 Critical
CVSS2
8.8 High
CVSS3
Связанные уязвимости
It is possible to delete an IndexedDB key value and subsequently try to extract it during conversion. This results in a use-after-free and a potentially exploitable crash. This vulnerability affects Firefox < 69, Thunderbird < 68.1, Thunderbird < 60.9, Firefox ESR < 60.9, and Firefox ESR < 68.1.
It is possible to delete an IndexedDB key value and subsequently try to extract it during conversion. This results in a use-after-free and a potentially exploitable crash. This vulnerability affects Firefox < 69, Thunderbird < 68.1, Thunderbird < 60.9, Firefox ESR < 60.9, and Firefox ESR < 68.1.
It is possible to delete an IndexedDB key value and subsequently try t ...
It is possible to delete an IndexedDB key value and subsequently try to extract it during conversion. This results in a use-after-free and a potentially exploitable crash. This vulnerability affects Firefox < 69, Thunderbird < 68.1, Thunderbird < 60.9, Firefox ESR < 60.9, and Firefox ESR < 68.1.
Уязвимость компонента IndexedDB веб-браузеров Firefox, Firefox ESR и почтового клиента Thunderbird, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании
EPSS
9.3 Critical
CVSS2
8.8 High
CVSS3