CVE-2019-11707

Scores

EPSS

0.844high84.4%
0%20%40%60%80%100%

Percentile: 84.4%

CVSS

8.8high3.x
0246810

CVSS Score: 8.8/10

All CVSS Scores

CVSS 3.x
8.8

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CVSS 2.0
7.5

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Description

A type confusion vulnerability can occur when manipulating JavaScript objects due to issues in Array.pop. This can allow for an exploitable crash. We are aware of targeted attacks in the wild abusing this flaw. This vulnerability affects Firefox ESR < 60.7.1, Firefox < 67.0.3, and Thunderbird < 60.7.2.

Scaner-VS 7 — a modern vulnerability management solution

Uses this database for vulnerability detection. High-speed search, cross-platform, advanced configuration audit, and flexible filtering. Suitable for organizations of any size.
Learn more about Scaner-VS 7

Sources

astradebiannvdredhatubuntu

CWEs

CWE-843

Related Vulnerabilities

Exploits

Exploit ID: 47038

Source: exploitdb

URL: https://www.exploit-db.com/exploits/47038

Exploit ID: 50691

Source: exploitdb

URL: https://www.exploit-db.com/exploits/50691

Exploit ID: CVE-2019-11707

Source: github-poc

URL: https://github.com/CosminGGeorgescu/CVE-2019-11707-PoC

Vulnerable Software (53)

Type: Configuration

Product: firefox

Operating System: rhel

Trait:
{  "fixed": "60.7.2-3.el8_0"}

Source: redhat

Type: Configuration

Product: firefox

Operating System: ubuntu bionic 18.04

Trait:
{  "fixed": "67.0.3+build1-0ubuntu0.18.04.1"}

Source: ubuntu

Type: Configuration

Product: firefox

Operating System: ubuntu disco 19.04

Trait:
{  "fixed": "67.0.3+build1-0ubuntu0.19.04.1"}

Source: ubuntu

Type: Configuration

Product: firefox

Operating System: ubuntu eoan 19.10

Trait:
{  "fixed": "67.0.3+build1-0ubuntu1"}

Source: ubuntu

Type: Configuration

Product: firefox

Operating System: ubuntu focal 20.04

Trait:
{  "fixed": "67.0.3+build1-0ubuntu1"}

Source: ubuntu

Type: Configuration

Product: firefox

Operating System: ubuntu groovy 20.10

Trait:
{  "fixed": "67.0.3+build1-0ubuntu1"}

Source: ubuntu

Type: Configuration

Product: firefox

Operating System: ubuntu hirsute 21.04

Trait:
{  "fixed": "67.0.3+build1-0ubuntu1"}

Source: ubuntu

Type: Configuration

Product: firefox

Operating System: ubuntu impish 21.10

Trait:
{  "fixed": "67.0.3+build1-0ubuntu1"}

Source: ubuntu

Type: Configuration

Product: firefox

Operating System: ubuntu jammy 22.04

Trait:
{  "fixed": "67.0.3+build1-0ubuntu1"}

Source: ubuntu

Type: Configuration

Product: firefox

Operating System: ubuntu kinetic 22.10

Trait:
{  "fixed": "67.0.3+build1-0ubuntu1"}

Source: ubuntu