CVE-2019-17015: High severity thunderbird vulnerability
During the initialization of a new content process, a pointer offset can be manipulated leading to memory corruption and a potentially exploitable crash in the parent process. Note: this issue only occurs on Windows. Other operating systems are unaffected.. This vulnerability affects Firefox ESR < 68.4 and Firefox < 72.
Other sources
During the initialization of a new content process, a pointer offset can be manipulated leading to memory corruption and a potentially exploitable crash in the parent process. Note: this issue only occurs on Windows. Other operating systems are unaffected.
Affected Software
Event History
Parent advisories
This vulnerability appears in the following advisories.
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is CVE-2019-17015?
CVE-2019-17015 is a vulnerability in Mozilla Firefox, Firefox ESR, and Thunderbird that allows for memory corruption and potentially exploitable crashes on Windows.
How severe is CVE-2019-17015?
CVE-2019-17015 has a severity rating of high.
Which operating systems are affected by CVE-2019-17015?
CVE-2019-17015 only affects the Windows operating system.
How can I fix CVE-2019-17015?
To fix CVE-2019-17015, update to Mozilla Firefox version 72 or Firefox ESR version 68.4 or Thunderbird version 68.4.1 or later.
Where can I find more information about CVE-2019-17015?
You can find more information about CVE-2019-17015 on the Mozilla Security Advisories page. (See reference links)