CVE-2019-9793

MEDIUM

Firefox < 66.0, Firefox ESR < 60.6, Thunderbird < 60.6 - Memory Corruption via Disabled Spectre Mitigations

Title source: llm
STIX 2.1

Description

A mechanism was discovered that removes some bounds checking for string, array, or typed array accesses if Spectre mitigations have been disabled. This vulnerability could allow an attacker to create an arbitrary value in compiled JavaScript, for which the range analysis will infer a fully controlled, incorrect range in circumstances where users have explicitly disabled Spectre mitigations. *Note: Spectre mitigations are currently enabled for all users by default settings.*. This vulnerability affects Thunderbird < 60.6, Firefox ESR < 60.6, and Firefox < 66.

References (6)

Core 6
Core References
Issue Tracking, Permissions Required, Vendor Advisory x_refsource_misc
https://bugzilla.mozilla.org/show_bug.cgi?id=1528829
Vendor Advisory vendor-advisory x_refsource_redhat
https://access.redhat.com/errata/RHSA-2019:0966
Vendor Advisory vendor-advisory x_refsource_redhat
https://access.redhat.com/errata/RHSA-2019:1144

Scores

CVSS v3 5.9
EPSS 0.0040
EPSS Percentile 60.9%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

Details

CWE
CWE-119
Status published
Products (3)
mozilla/firefox < 66.0
mozilla/firefox_esr < 60.6
mozilla/thunderbird < 60.6
Published Apr 26, 2019
Tracked Since Feb 18, 2026