CVE-2019-17017 log
| Source |
|
| Severity | Critical |
| Remote | Yes |
| Type | Arbitrary code execution |
| Description | A type confusion issue has been found in Firefox before 72.0, and Thunderbird before 68.4.1, in XPCVariant.cpp where, due to a missing case handling object types, a type confusion vulnerability could occur, resulting in a crash. |
| Group | Package | Affected | Fixed | Severity | Status | Ticket |
|---|---|---|---|---|---|---|
| AVG-1086 | thunderbird | 68.3.1-1 | 68.4.1-1 | Critical | Fixed | |
| AVG-1084 | firefox | 71.0-1 | 72.0-1 | Critical | Fixed |
| Date | Advisory | Group | Package | Severity | Type |
|---|---|---|---|---|---|
| 14 Jan 2020 | ASA-202001-4 | AVG-1086 | thunderbird | Critical | multiple issues |
| 08 Jan 2020 | ASA-202001-1 | AVG-1084 | firefox | Critical | multiple issues |
| References |
|---|
https://www.mozilla.org/en-US/security/advisories/mfsa2020-01/#CVE-2019-17017 https://bugzilla.mozilla.org/show_bug.cgi?id=1603055 |