CVE-2019-11764 log

Source	CVE Red Hat MITRE NVD Debian Ubuntu SUSE Alpine Mageia CVE Details CIRCL Bugs Arch Linux Red Hat Gentoo SUSE GitHub Lists oss-security full-disclosure bugtraq Misc GitHub code web search
Severity	Critical
Remote	Yes
Type	Arbitrary code execution
Description	Several memory safety bugs have been found in Firefox before 70.0 and Thunderbird before 68.2. Some of these bugs showed evidence of memory corruption and Mozilla presumes that with enough effort some of these could be exploited to run arbitrary code.

Group	Package	Affected	Fixed	Severity	Status	Ticket
AVG-1055	firefox	69.0.3-1	70.0-1	Critical	Fixed
AVG-1054	thunderbird	68.1.1-1	68.2.0-1	Critical	Fixed

Date	Advisory	Group	Package	Severity	Type
26 Oct 2019	ASA-201910-16	AVG-1055	firefox	Critical	multiple issues
26 Oct 2019	ASA-201910-15	AVG-1054	thunderbird	Critical	multiple issues

References
https://www.mozilla.org/en-US/security/advisories/mfsa2019-34/#CVE-2019-11764 https://www.mozilla.org/en-US/security/advisories/mfsa2019-35/#CVE-2019-11764 https://bugzilla.mozilla.org/buglist.cgi?bug_id=1558522%2C1577061%2C1548044%2C1571223%2C1573048%2C1578933%2C1575217%2C1583684%2C1586845%2C1581950%2C1583463%2C1586599

References

https://www.mozilla.org/en-US/security/advisories/mfsa2019-34/#CVE-2019-11764
https://www.mozilla.org/en-US/security/advisories/mfsa2019-35/#CVE-2019-11764
https://bugzilla.mozilla.org/buglist.cgi?bug_id=1558522%2C1577061%2C1548044%2C1571223%2C1573048%2C1578933%2C1575217%2C1583684%2C1586845%2C1581950%2C1583463%2C1586599