CVE-2019-11752 log
Source |
|
Severity | High |
Remote | Yes |
Type | Arbitrary code execution |
Description | In Firefox before 69.0, it is possible to delete an IndexedDB key value and subsequently try to extract it during conversion. This results in a use-after-free and a potentially exploitable crash. |
Group | Package | Affected | Fixed | Severity | Status | Ticket |
---|---|---|---|---|---|---|
AVG-1036 | firefox | 68.0.2-1 | 69.0-1 | High | Fixed |
Date | Advisory | Group | Package | Severity | Type |
---|---|---|---|---|---|
04 Sep 2019 | ASA-201909-2 | AVG-1036 | firefox | High | multiple issues |
References |
---|
https://www.mozilla.org/en-US/security/advisories/mfsa2019-25/#CVE-2019-11752 https://bugzilla.mozilla.org/show_bug.cgi?id=1501152 |