CVE-2019-11707: Mozilla Firefox and Thunderbird Type Confusion Vulnerability

Reference Links

• https://bugzilla.mozilla.org/show_bug.cgi?id=1544386
• https://www.mozilla.org/en-US/security/advisories/mfsa2019-20/
• https://www.mozilla.org/en-US/security/advisories/mfsa2019-18/
• https://security.gentoo.org/glsa/201908-12
• https://www.mozilla.org/security/advisories/mfsa2019-18/
• https://www.mozilla.org/security/advisories/mfsa2019-20/
• https://nvd.nist.gov/vuln/detail/CVE-2019-11707

Parent vulnerabilities

(Appears in the following advisories)

• MFSA2019-20
• MFSA2019-18

Peer vulnerabilities

(Found alongside the following vulnerabilities)

• CVE-2019-11707
• CVE-2019-11708

Frequently Asked Questions

• What is CVE-2019-11707?

  CVE-2019-11707 is a type confusion vulnerability in Mozilla Firefox and Thunderbird that allows for an exploitable crash.

• Which software versions are affected by CVE-2019-11707?

  CVE-2019-11707 affects Firefox ESR versions prior to 60.7.1, Firefox versions prior to 67.0.3, and Thunderbird versions prior to 60.7.2.

• What is the severity of CVE-2019-11707?

  CVE-2019-11707 has a severity rating of 8.8 (Critical).

• How can I fix CVE-2019-11707?

  To fix CVE-2019-11707, update your Firefox ESR version to 60.7.1 or later, update your Firefox version to 67.0.3 or later, and update your Thunderbird version to 60.7.2 or later.

• Where can I find more information about CVE-2019-11707?

  You can find more information about CVE-2019-11707 on the Mozilla website at https://www.mozilla.org/en-US/security/advisories/mfsa2019-20/ and https://www.mozilla.org/en-US/security/advisories/mfsa2019-18/ as well as on the Bugzilla page at https://bugzilla.mozilla.org/show_bug.cgi?id=1544386.