CVE-2019-9810

Incorrect alias information in IonMonkey JIT compiler for Array.prototype.slice method may lead to missing bounds check and a buffer overflow. This vulnerability affects Firefox < 66.0.1, Firefox ESR < 60.6.1, and Thunderbird < 60.6.1.

Link	Resource
https://www.mozilla.org/security/advisories/mfsa2019-12/	Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2019-10/	Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2019-09/	Vendor Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=1537924	Exploit Issue Tracking
https://access.redhat.com/errata/RHSA-2019:0966	Third Party Advisory
https://access.redhat.com/errata/RHSA-2019:1144	Third Party Advisory
http://packetstormsecurity.com/files/155592/Mozilla-Firefox-Windows-64-Bit-Chain-Exploit.html	Exploit Third Party Advisory

Configuration 1

cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_eus:8.1:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_eus:8.2:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_server_tus:8.2:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_server_aus:8.2:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_server_tus:8.4:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_eus:8.4:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_server_aus:8.4:*:*:*:*:*:*:*

---

Published : 2019-04-26 05:29

Updated : 2022-03-30 05:57

---

NVD link : CVE-2019-9810

Mitre link : CVE-2019-9810

No products.

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer