CVE-2019-17012 log

Source
Severity Critical
Remote Yes
Type Arbitrary code execution
Description
Several memory safety bugs have been found in Firefox before 71.0 and Thunderbird before 68.3. Some of these bugs showed evidence of memory corruption and Mozilla presumes that with enough effort some of these could have been exploited to run arbitrary code.
Group Package Affected Fixed Severity Status Ticket
AVG-1072 thunderbird 68.2.2-2 68.3.0-1 Critical Fixed
AVG-1071 firefox 70.0.1-3 71.0-1 Critical Fixed
Date Advisory Group Package Severity Type
06 Dec 2019 ASA-201912-2 AVG-1072 thunderbird Critical arbitrary code execution
03 Dec 2019 ASA-201912-1 AVG-1071 firefox Critical multiple issues
References
https://www.mozilla.org/en-US/security/advisories/mfsa2019-36/#CVE-2019-17012
https://bugzilla.mozilla.org/buglist.cgi?bug_id=1449736%2C1533957%2C1560667%2C1567209%2C1580288%2C1585760%2C1592502