CVE-2019-9819: Critical severity Mozilla Thunderbird vulnerability

Q: What is CVE-2019-9819?

CVE-2019-9819 is a vulnerability where a JavaScript compartment mismatch can occur while working with the fetch API, resulting in a potentially exploitable crash.

Q: Which software products are affected by CVE-2019-9819?

CVE-2019-9819 affects Thunderbird < 60.7, Firefox < 67, and Firefox ESR < 60.7.

Q: What is the severity of CVE-2019-9819?

CVE-2019-9819 has a severity rating of critical (9.8).

Q: How do I fix CVE-2019-9819?

To fix CVE-2019-9819, update Thunderbird to version 60.7 or later, update Firefox to version 67 or later, or update Firefox ESR to version 60.7 or later.

Q: Where can I find more information about CVE-2019-9819?

You can find more information about CVE-2019-9819 at the following references: [link1] [link2] [link3].

Published May 21, 2019

Updated

A vulnerability where a JavaScript compartment mismatch can occur while working with the fetch API, resulting in a potentially exploitable crash.

External Reference:

https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9819

Other sources

A vulnerability where a JavaScript compartment mismatch can occur while working with the fetch API, resulting in a potentially exploitable crash.

— Mozilla

Affected Software

9 affected componentsFixes available

Mozilla Thunderbird<60.7

60.7

Mozilla Firefox<67.0

Mozilla Firefox ESR<60.7

Mozilla Thunderbird<60.7

Mozilla Firefox<67

Mozilla Firefox ESR<60.7

60.7

debian/firefox

154.0.1-1

debian/firefox-esr

140.12.0esr-1~deb12u1140.14.0esr-1~deb12u1140.12.0esr-1~deb13u1140.14.0esr-1~deb13u1140.14.0esr-2

debian/thunderbird

1:140.12.0esr-1~deb12u11:140.14.0esr-1~deb12u11:140.12.0esr-1~deb13u11:140.14.0esr-1~deb13u11:140.14.0esr-1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade Thunderbird to a version that resolves this vulnerability.
Fixed in 60.7
Upgrade
Upgrade Firefox to a version that resolves this vulnerability.
Fixed in 67
Upgrade
Upgrade Firefox ESR to a version that resolves this vulnerability.
Fixed in 60.7
Upgrade
Upgrade debian/firefox to a version that resolves this vulnerability.
Fixed in 154.0.1-1
Upgrade
Upgrade debian/firefox-esr to a version that resolves this vulnerability.
Fixed in 140.12.0esr-1~deb12u1Fixed in 140.14.0esr-1~deb12u1Fixed in 140.12.0esr-1~deb13u1Fixed in 140.14.0esr-1~deb13u1Fixed in 140.14.0esr-2
Upgrade
Upgrade debian/thunderbird to a version that resolves this vulnerability.
Fixed in 1:140.12.0esr-1~deb12u1Fixed in 1:140.14.0esr-1~deb12u1Fixed in 1:140.12.0esr-1~deb13u1Fixed in 1:140.14.0esr-1~deb13u1Fixed in 1:140.14.0esr-1
Upgrade
Upgrade Mozilla Thunderbird to a version that resolves this vulnerability.
Fixed in 60.7
Upgrade
Upgrade Mozilla Firefox to a version that resolves this vulnerability.
Fixed in 67
Upgrade
Upgrade Mozilla Firefox ESR to a version that resolves this vulnerability.
Fixed in 60.7

Event History

May 21, 2019

CVE Published

via Mozilla·12:00 AM

May 22, 2019

Data Sourced

via Red Hat·01:46 AM

DescriptionSeverityAffected Software

Jul 23, 2019

CVE Published

via MITRE·01:23 PM

Data Sourced

via MITRE·01:23 PM

DescriptionWeakness

Data Sourced

via NVD·02:15 PM

DescriptionSeverityWeaknessAffected Software

Jan 11, 2024

Data Sourced

via Launchpad·11:34 PM

Description

Feb 19, 2026

Data Sourced

via Ubuntu·05:59 PM

RemedyDescriptionSeverityAffected Software

Sep 2, 2026

Data Sourced

via Debian·12:38 AM

DescriptionAffected Software

Parent advisories

This vulnerability appears in the following advisories.

Peer vulnerabilities

Found alongside the following vulnerabilities.

Frequently Asked Questions

What is CVE-2019-9819?

CVE-2019-9819 is a vulnerability where a JavaScript compartment mismatch can occur while working with the fetch API, resulting in a potentially exploitable crash.

Which software products are affected by CVE-2019-9819?

CVE-2019-9819 affects Thunderbird < 60.7, Firefox < 67, and Firefox ESR < 60.7.

What is the severity of CVE-2019-9819?

CVE-2019-9819 has a severity rating of critical (9.8).

How do I fix CVE-2019-9819?

To fix CVE-2019-9819, update Thunderbird to version 60.7 or later, update Firefox to version 67 or later, or update Firefox ESR to version 60.7 or later.

Where can I find more information about CVE-2019-9819?

You can find more information about CVE-2019-9819 at the following references: [link1] [link2] [link3].

CVE-2019-9819: Critical severity Mozilla Thunderbird vulnerability

Other sources

Affected Software

Remediation

Event History

Parent advisories

Peer vulnerabilities

Frequently Asked Questions

What is CVE-2019-9819?

Which software products are affected by CVE-2019-9819?

What is the severity of CVE-2019-9819?

How do I fix CVE-2019-9819?

Where can I find more information about CVE-2019-9819?

Company

Resources

Contact