CVE-2019-17005: Buffer Overflow

Reference Links

• https://bugzilla.mozilla.org/show_bug.cgi?id=1584170
• https://www.mozilla.org/en-US/security/advisories/mfsa2019-38/
• https://www.mozilla.org/security/advisories/mfsa2019-36/
• https://www.mozilla.org/security/advisories/mfsa2019-37/
• https://www.mozilla.org/security/advisories/mfsa2019-38/
• http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00001.html
• http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00000.html
• https://usn.ubuntu.com/4241-1/
• https://access.redhat.com/errata/RHSA-2020:0292
• https://access.redhat.com/errata/RHSA-2020:0295
• https://security.gentoo.org/glsa/202003-02
• https://security.gentoo.org/glsa/202003-10
• https://usn.ubuntu.com/4335-1/
• https://launchpad.net/bugs/cve/CVE-2019-17005
• https://www.mozilla.org/en-US/security/advisories/mfsa2019-37/
• https://www.mozilla.org/en-US/security/advisories/mfsa2019-37/#CVE-2019-17005
• https://access.redhat.com/errata/RHSA-2019:4108
• https://access.redhat.com/errata/RHSA-2019:4107
• https://access.redhat.com/errata/RHSA-2019:4111
• https://access.redhat.com/security/cve/cve-2019-17005
• https://access.redhat.com/errata/RHSA-2019:4148
• https://access.redhat.com/errata/RHSA-2019:4195
• https://access.redhat.com/errata/RHSA-2019:4205
• https://bugzilla.redhat.com/show_bug.cgi?id=1779435
• https://www.mozilla.org/en-US/security/advisories/mfsa2019-38/#CVE-2019-11745
• https://www.mozilla.org/en-US/security/advisories/mfsa2019-36/
• https://www.mozilla.org/en-US/security/advisories/mfsa2019-36/#CVE-2019-17005
• https://www.mozilla.org/en-US/security/advisories/mfsa2019-38/#CVE-2019-17005
• https://security-tracker.debian.org/tracker/CVE-2019-17005
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-17005
• https://nvd.nist.gov/vuln/detail/CVE-2019-17005
• https://ubuntu.com/security/CVE-2019-17005

Parent vulnerabilities

(Appears in the following advisories)

• MFSA2019-38
• MFSA2019-37
• MFSA2019-36

Peer vulnerabilities

(Found alongside the following vulnerabilities)

• CVE-2019-17008
• CVE-2019-13722
• CVE-2019-11745
• CVE-2019-17009
• CVE-2019-17010
• CVE-2019-17005
• CVE-2019-17011
• CVE-2019-17012
• CVE-2019-11756
• CVE-2019-17014
• CVE-2019-17013

Frequently Asked Questions

• What is CVE-2019-17005?

  CVE-2019-17005 is a vulnerability that affects Thunderbird, Firefox ESR, and Firefox, leading to memory corruption and a potentially exploitable crash.

• Which software versions are affected by CVE-2019-17005?

  CVE-2019-17005 affects Thunderbird < 68.3, Firefox ESR < 68.3, and Firefox < 71.0.

• What is the severity of CVE-2019-17005?

  CVE-2019-17005 has a severity rating of 8.8 (high).

• How can I fix CVE-2019-17005?

  To fix CVE-2019-17005, you should update Thunderbird to version 68.3 or later, Firefox ESR to version 68.3 or later, and Firefox to version 71.0 or later.

• Where can I find more information about CVE-2019-17005?

  You can find more information about CVE-2019-17005 at the following references: [Bugzilla](https://bugzilla.mozilla.org/show_bug.cgi?id=1584170), [Mozilla Advisory](https://www.mozilla.org/en-US/security/advisories/mfsa2019-38/), [Mozilla Security Advisory](https://www.mozilla.org/security/advisories/mfsa2019-36/).