CVE-2019-17017 log

Severity Critical
Remote Yes
Type Arbitrary code execution
A type confusion issue has been found in Firefox before 72.0, and Thunderbird before 68.4.1, in XPCVariant.cpp where, due to a missing case handling object types, a type confusion vulnerability could occur, resulting in a crash.
Group Package Affected Fixed Severity Status Ticket
AVG-1086 thunderbird 68.3.1-1 68.4.1-1 Critical Fixed
AVG-1084 firefox 71.0-1 72.0-1 Critical Fixed
Date Advisory Group Package Severity Type
14 Jan 2020 ASA-202001-4 AVG-1086 thunderbird Critical multiple issues
08 Jan 2020 ASA-202001-1 AVG-1084 firefox Critical multiple issues