CVE-2019-11746: Use After Free
A use-after-free vulnerability can occur while manipulating video elements if the body is freed while still in use. This results in a potentially exploitable crash.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Thunderbirdto a version that resolves this vulnerability.Fixed in 68.1 - Upgrade
Upgrade
Thunderbirdto a version that resolves this vulnerability.Fixed in 60.9 - Upgrade
Upgrade
Firefox ESRto a version that resolves this vulnerability.Fixed in 68.1 - Upgrade
Upgrade
Firefoxto a version that resolves this vulnerability.Fixed in 69 - Upgrade
Upgrade
Firefox ESRto a version that resolves this vulnerability.Fixed in 60.9 - Upgrade
Upgrade
debian/firefoxto a version that resolves this vulnerability.Fixed in 147.0.4-1 - Upgrade
Upgrade
debian/firefox-esrto a version that resolves this vulnerability.Fixed in 115.14.0esr-1~deb11u1Fixed in 140.7.0esr-1~deb11u1Fixed in 128.14.0esr-1~deb12u1Fixed in 140.8.0esr-1~deb12u1Fixed in 140.4.0esr-1~deb13u1Fixed in 140.8.0esr-1~deb13u1Fixed in 140.7.0esr-1 - Upgrade
Upgrade
debian/thunderbirdto a version that resolves this vulnerability.Fixed in 1:115.12.0-1~deb11u1Fixed in 1:140.7.1esr-1~deb11u1Fixed in 1:140.6.0esr-1~deb12u1Fixed in 1:140.7.1esr-1~deb12u1Fixed in 1:140.6.0esr-1~deb13u1Fixed in 1:140.7.1esr-1~deb13u1Fixed in 1:140.7.1esr-1 - Upgrade
Upgrade
alpine/firefox-esrto a version that resolves this vulnerability.Fixed in 69.9.0-r0 - Upgrade
Upgrade
alpine/firefox-esrto a version that resolves this vulnerability.Fixed in 68.1.0-r0
Event History
Parent advisories
This vulnerability appears in the following advisories.
Peer vulnerabilities
Found alongside the following vulnerabilities.
- CVE-2019-11739
- CVE-2019-11746
- CVE-2019-11744
- CVE-2019-11742
- CVE-2019-11752
- CVE-2019-11743
- CVE-2019-11740
- CVE-2019-11751
- CVE-2019-11736
- CVE-2019-11753
- CVE-2019-9812
- CVE-2019-11748
- CVE-2019-11749
- CVE-2019-11750
- CVE-2019-11738
- CVE-2019-11747
- CVE-2019-11735
- CVE-2019-11741
- CVE-2019-5849
- CVE-2019-11737
- CVE-2019-11734
- CVE-2019-11758
Frequently Asked Questions
What is CVE-2019-11746?
CVE-2019-11746 is a use-after-free vulnerability that can occur while manipulating video elements in certain versions of Mozilla Firefox and Thunderbird.
How does CVE-2019-11746 affect Mozilla Firefox and Thunderbird?
CVE-2019-11746 affects certain versions of Mozilla Firefox ESR, Firefox, and Thunderbird.
How severe is CVE-2019-11746?
CVE-2019-11746 has a severity rating of 7 (high).
What is the potential impact of CVE-2019-11746?
CVE-2019-11746 can potentially lead to a crash, which may be exploitable.
How can I fix CVE-2019-11746?
To fix CVE-2019-11746, update your Mozilla Firefox or Thunderbird to the version mentioned in the advisory.