csaf_redhat - rhsa-2019:1267

rhsa-2019:1267

Vulnerability from csaf_redhat

Published

2019-05-23 15:53

Modified

2025-10-09 18:21

Summary

Red Hat Security Advisory: firefox security update

Notes

Topic

An update for firefox is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Details

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox to version 60.7.0 ESR. Security Fix(es): * Mozilla: Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7 (CVE-2019-9800) * Mozilla: Cross-origin theft of images with createImageBitmap (CVE-2019-9797) * Mozilla: Type confusion with object groups and UnboxedObjects (CVE-2019-9816) * Mozilla: Stealing of cross-domain images using canvas (CVE-2019-9817) * Mozilla: Compartment mismatch with fetch API (CVE-2019-9819) * Mozilla: Use-after-free of ChromeEventHandler by DocShell (CVE-2019-9820) * Mozilla: Use-after-free in XMLHttpRequest (CVE-2019-11691) * Mozilla: Use-after-free removing listeners in the event listener manager (CVE-2019-11692) * Mozilla: Buffer overflow in WebGL bufferdata on Linux (CVE-2019-11693) * mozilla: Cross-origin theft of images with ImageBitmapRenderingContext (CVE-2018-18511) * chromium-browser: Out of bounds read in Skia (CVE-2019-5798) * Mozilla: Theft of user history data through drag and drop of hyperlinks to and from bookmarks (CVE-2019-11698) * libpng: use-after-free in png_image_free in png.c (CVE-2019-7317) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Critical"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for firefox is now available for Red Hat Enterprise Linux 6.\n\nRed Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.\n\nThis update upgrades Firefox to version 60.7.0 ESR.\n\nSecurity Fix(es):\n\n* Mozilla: Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7 (CVE-2019-9800)\n\n* Mozilla: Cross-origin theft of images with createImageBitmap (CVE-2019-9797)\n\n* Mozilla: Type confusion with object groups and UnboxedObjects (CVE-2019-9816)\n\n* Mozilla: Stealing of cross-domain images using canvas (CVE-2019-9817)\n\n* Mozilla: Compartment mismatch with fetch API (CVE-2019-9819)\n\n* Mozilla: Use-after-free of ChromeEventHandler by DocShell (CVE-2019-9820)\n\n* Mozilla: Use-after-free in XMLHttpRequest (CVE-2019-11691)\n\n* Mozilla: Use-after-free removing listeners in the event listener manager (CVE-2019-11692)\n\n* Mozilla: Buffer overflow in WebGL bufferdata on Linux (CVE-2019-11693)\n\n* mozilla: Cross-origin theft of images with ImageBitmapRenderingContext (CVE-2018-18511)\n\n* chromium-browser: Out of bounds read in Skia (CVE-2019-5798)\n\n* Mozilla: Theft of user history data through drag and drop of hyperlinks to and from bookmarks (CVE-2019-11698)\n\n* libpng: use-after-free in png_image_free in png.c (CVE-2019-7317)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2019:1267",
        "url": "https://access.redhat.com/errata/RHSA-2019:1267"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#critical",
        "url": "https://access.redhat.com/security/updates/classification/#critical"
      },
      {
        "category": "external",
        "summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/",
        "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/"
      },
      {
        "category": "external",
        "summary": "1672409",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1672409"
      },
      {
        "category": "external",
        "summary": "1676997",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1676997"
      },
      {
        "category": "external",
        "summary": "1688200",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1688200"
      },
      {
        "category": "external",
        "summary": "1712617",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712617"
      },
      {
        "category": "external",
        "summary": "1712618",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712618"
      },
      {
        "category": "external",
        "summary": "1712619",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712619"
      },
      {
        "category": "external",
        "summary": "1712621",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712621"
      },
      {
        "category": "external",
        "summary": "1712622",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712622"
      },
      {
        "category": "external",
        "summary": "1712623",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712623"
      },
      {
        "category": "external",
        "summary": "1712625",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712625"
      },
      {
        "category": "external",
        "summary": "1712626",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712626"
      },
      {
        "category": "external",
        "summary": "1712628",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712628"
      },
      {
        "category": "external",
        "summary": "1712629",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712629"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_1267.json"
      }
    ],
    "title": "Red Hat Security Advisory: firefox security update",
    "tracking": {
      "current_release_date": "2025-10-09T18:21:36+00:00",
      "generator": {
        "date": "2025-10-09T18:21:36+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.6.9"
        }
      },
      "id": "RHSA-2019:1267",
      "initial_release_date": "2019-05-23T15:53:40+00:00",
      "revision_history": [
        {
          "date": "2019-05-23T15:53:40+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2019-05-23T15:53:40+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2025-10-09T18:21:36+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Desktop (v. 6)",
                "product": {
                  "name": "Red Hat Enterprise Linux Desktop (v. 6)",
                  "product_id": "6Client-6.10.z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:6::client"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Desktop Optional (v. 6)",
                "product": {
                  "name": "Red Hat Enterprise Linux Desktop Optional (v. 6)",
                  "product_id": "6Client-optional-6.10.z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:6::client"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux HPC Node Optional (v. 6)",
                "product": {
                  "name": "Red Hat Enterprise Linux HPC Node Optional (v. 6)",
                  "product_id": "6ComputeNode-optional-6.10.z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:6::computenode"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Server (v. 6)",
                "product": {
                  "name": "Red Hat Enterprise Linux Server (v. 6)",
                  "product_id": "6Server-6.10.z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:6::server"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Server Optional (v. 6)",
                "product": {
                  "name": "Red Hat Enterprise Linux Server Optional (v. 6)",
                  "product_id": "6Server-optional-6.10.z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:6::server"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Workstation (v. 6)",
                "product": {
                  "name": "Red Hat Enterprise Linux Workstation (v. 6)",
                  "product_id": "6Workstation-6.10.z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:6::workstation"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Workstation Optional (v. 6)",
                "product": {
                  "name": "Red Hat Enterprise Linux Workstation Optional (v. 6)",
                  "product_id": "6Workstation-optional-6.10.z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:6::workstation"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
                "product": {
                  "name": "firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
                  "product_id": "firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/firefox-debuginfo@60.7.0-1.el6_10?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "firefox-0:60.7.0-1.el6_10.x86_64",
                "product": {
                  "name": "firefox-0:60.7.0-1.el6_10.x86_64",
                  "product_id": "firefox-0:60.7.0-1.el6_10.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/firefox@60.7.0-1.el6_10?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "firefox-debuginfo-0:60.7.0-1.el6_10.i686",
                "product": {
                  "name": "firefox-debuginfo-0:60.7.0-1.el6_10.i686",
                  "product_id": "firefox-debuginfo-0:60.7.0-1.el6_10.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/firefox-debuginfo@60.7.0-1.el6_10?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "firefox-0:60.7.0-1.el6_10.i686",
                "product": {
                  "name": "firefox-0:60.7.0-1.el6_10.i686",
                  "product_id": "firefox-0:60.7.0-1.el6_10.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/firefox@60.7.0-1.el6_10?arch=i686"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i686"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "firefox-0:60.7.0-1.el6_10.src",
                "product": {
                  "name": "firefox-0:60.7.0-1.el6_10.src",
                  "product_id": "firefox-0:60.7.0-1.el6_10.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/firefox@60.7.0-1.el6_10?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
                "product": {
                  "name": "firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
                  "product_id": "firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/firefox-debuginfo@60.7.0-1.el6_10?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "firefox-0:60.7.0-1.el6_10.s390x",
                "product": {
                  "name": "firefox-0:60.7.0-1.el6_10.s390x",
                  "product_id": "firefox-0:60.7.0-1.el6_10.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/firefox@60.7.0-1.el6_10?arch=s390x"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
                "product": {
                  "name": "firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
                  "product_id": "firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/firefox-debuginfo@60.7.0-1.el6_10?arch=ppc64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "firefox-0:60.7.0-1.el6_10.ppc64",
                "product": {
                  "name": "firefox-0:60.7.0-1.el6_10.ppc64",
                  "product_id": "firefox-0:60.7.0-1.el6_10.ppc64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/firefox@60.7.0-1.el6_10?arch=ppc64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:60.7.0-1.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.i686"
        },
        "product_reference": "firefox-0:60.7.0-1.el6_10.i686",
        "relates_to_product_reference": "6Client-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:60.7.0-1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64"
        },
        "product_reference": "firefox-0:60.7.0-1.el6_10.ppc64",
        "relates_to_product_reference": "6Client-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:60.7.0-1.el6_10.s390x as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.s390x"
        },
        "product_reference": "firefox-0:60.7.0-1.el6_10.s390x",
        "relates_to_product_reference": "6Client-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:60.7.0-1.el6_10.src as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.src"
        },
        "product_reference": "firefox-0:60.7.0-1.el6_10.src",
        "relates_to_product_reference": "6Client-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:60.7.0-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64"
        },
        "product_reference": "firefox-0:60.7.0-1.el6_10.x86_64",
        "relates_to_product_reference": "6Client-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo-0:60.7.0-1.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686"
        },
        "product_reference": "firefox-debuginfo-0:60.7.0-1.el6_10.i686",
        "relates_to_product_reference": "6Client-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo-0:60.7.0-1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64"
        },
        "product_reference": "firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
        "relates_to_product_reference": "6Client-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo-0:60.7.0-1.el6_10.s390x as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x"
        },
        "product_reference": "firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
        "relates_to_product_reference": "6Client-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo-0:60.7.0-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
        },
        "product_reference": "firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
        "relates_to_product_reference": "6Client-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:60.7.0-1.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
          "product_id": "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686"
        },
        "product_reference": "firefox-0:60.7.0-1.el6_10.i686",
        "relates_to_product_reference": "6Client-optional-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:60.7.0-1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
          "product_id": "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64"
        },
        "product_reference": "firefox-0:60.7.0-1.el6_10.ppc64",
        "relates_to_product_reference": "6Client-optional-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:60.7.0-1.el6_10.s390x as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
          "product_id": "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x"
        },
        "product_reference": "firefox-0:60.7.0-1.el6_10.s390x",
        "relates_to_product_reference": "6Client-optional-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:60.7.0-1.el6_10.src as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
          "product_id": "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src"
        },
        "product_reference": "firefox-0:60.7.0-1.el6_10.src",
        "relates_to_product_reference": "6Client-optional-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:60.7.0-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
          "product_id": "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64"
        },
        "product_reference": "firefox-0:60.7.0-1.el6_10.x86_64",
        "relates_to_product_reference": "6Client-optional-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo-0:60.7.0-1.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
          "product_id": "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686"
        },
        "product_reference": "firefox-debuginfo-0:60.7.0-1.el6_10.i686",
        "relates_to_product_reference": "6Client-optional-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo-0:60.7.0-1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
          "product_id": "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64"
        },
        "product_reference": "firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
        "relates_to_product_reference": "6Client-optional-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo-0:60.7.0-1.el6_10.s390x as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
          "product_id": "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x"
        },
        "product_reference": "firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
        "relates_to_product_reference": "6Client-optional-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo-0:60.7.0-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
          "product_id": "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
        },
        "product_reference": "firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
        "relates_to_product_reference": "6Client-optional-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:60.7.0-1.el6_10.i686 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
          "product_id": "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686"
        },
        "product_reference": "firefox-0:60.7.0-1.el6_10.i686",
        "relates_to_product_reference": "6ComputeNode-optional-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:60.7.0-1.el6_10.ppc64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
          "product_id": "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64"
        },
        "product_reference": "firefox-0:60.7.0-1.el6_10.ppc64",
        "relates_to_product_reference": "6ComputeNode-optional-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:60.7.0-1.el6_10.s390x as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
          "product_id": "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x"
        },
        "product_reference": "firefox-0:60.7.0-1.el6_10.s390x",
        "relates_to_product_reference": "6ComputeNode-optional-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:60.7.0-1.el6_10.src as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
          "product_id": "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src"
        },
        "product_reference": "firefox-0:60.7.0-1.el6_10.src",
        "relates_to_product_reference": "6ComputeNode-optional-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:60.7.0-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
          "product_id": "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64"
        },
        "product_reference": "firefox-0:60.7.0-1.el6_10.x86_64",
        "relates_to_product_reference": "6ComputeNode-optional-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo-0:60.7.0-1.el6_10.i686 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
          "product_id": "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686"
        },
        "product_reference": "firefox-debuginfo-0:60.7.0-1.el6_10.i686",
        "relates_to_product_reference": "6ComputeNode-optional-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo-0:60.7.0-1.el6_10.ppc64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
          "product_id": "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64"
        },
        "product_reference": "firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
        "relates_to_product_reference": "6ComputeNode-optional-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo-0:60.7.0-1.el6_10.s390x as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
          "product_id": "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x"
        },
        "product_reference": "firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
        "relates_to_product_reference": "6ComputeNode-optional-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo-0:60.7.0-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
          "product_id": "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
        },
        "product_reference": "firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
        "relates_to_product_reference": "6ComputeNode-optional-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:60.7.0-1.el6_10.i686 as a component of Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.i686"
        },
        "product_reference": "firefox-0:60.7.0-1.el6_10.i686",
        "relates_to_product_reference": "6Server-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:60.7.0-1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64"
        },
        "product_reference": "firefox-0:60.7.0-1.el6_10.ppc64",
        "relates_to_product_reference": "6Server-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:60.7.0-1.el6_10.s390x as a component of Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.s390x"
        },
        "product_reference": "firefox-0:60.7.0-1.el6_10.s390x",
        "relates_to_product_reference": "6Server-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:60.7.0-1.el6_10.src as a component of Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.src"
        },
        "product_reference": "firefox-0:60.7.0-1.el6_10.src",
        "relates_to_product_reference": "6Server-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:60.7.0-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64"
        },
        "product_reference": "firefox-0:60.7.0-1.el6_10.x86_64",
        "relates_to_product_reference": "6Server-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo-0:60.7.0-1.el6_10.i686 as a component of Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686"
        },
        "product_reference": "firefox-debuginfo-0:60.7.0-1.el6_10.i686",
        "relates_to_product_reference": "6Server-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo-0:60.7.0-1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64"
        },
        "product_reference": "firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
        "relates_to_product_reference": "6Server-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo-0:60.7.0-1.el6_10.s390x as a component of Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x"
        },
        "product_reference": "firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
        "relates_to_product_reference": "6Server-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo-0:60.7.0-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
        },
        "product_reference": "firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
        "relates_to_product_reference": "6Server-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:60.7.0-1.el6_10.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
          "product_id": "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686"
        },
        "product_reference": "firefox-0:60.7.0-1.el6_10.i686",
        "relates_to_product_reference": "6Server-optional-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:60.7.0-1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
          "product_id": "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64"
        },
        "product_reference": "firefox-0:60.7.0-1.el6_10.ppc64",
        "relates_to_product_reference": "6Server-optional-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:60.7.0-1.el6_10.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
          "product_id": "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x"
        },
        "product_reference": "firefox-0:60.7.0-1.el6_10.s390x",
        "relates_to_product_reference": "6Server-optional-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:60.7.0-1.el6_10.src as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
          "product_id": "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src"
        },
        "product_reference": "firefox-0:60.7.0-1.el6_10.src",
        "relates_to_product_reference": "6Server-optional-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:60.7.0-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
          "product_id": "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64"
        },
        "product_reference": "firefox-0:60.7.0-1.el6_10.x86_64",
        "relates_to_product_reference": "6Server-optional-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo-0:60.7.0-1.el6_10.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
          "product_id": "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686"
        },
        "product_reference": "firefox-debuginfo-0:60.7.0-1.el6_10.i686",
        "relates_to_product_reference": "6Server-optional-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo-0:60.7.0-1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
          "product_id": "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64"
        },
        "product_reference": "firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
        "relates_to_product_reference": "6Server-optional-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo-0:60.7.0-1.el6_10.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
          "product_id": "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x"
        },
        "product_reference": "firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
        "relates_to_product_reference": "6Server-optional-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo-0:60.7.0-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
          "product_id": "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
        },
        "product_reference": "firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
        "relates_to_product_reference": "6Server-optional-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:60.7.0-1.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.i686"
        },
        "product_reference": "firefox-0:60.7.0-1.el6_10.i686",
        "relates_to_product_reference": "6Workstation-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:60.7.0-1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64"
        },
        "product_reference": "firefox-0:60.7.0-1.el6_10.ppc64",
        "relates_to_product_reference": "6Workstation-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:60.7.0-1.el6_10.s390x as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.s390x"
        },
        "product_reference": "firefox-0:60.7.0-1.el6_10.s390x",
        "relates_to_product_reference": "6Workstation-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:60.7.0-1.el6_10.src as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.src"
        },
        "product_reference": "firefox-0:60.7.0-1.el6_10.src",
        "relates_to_product_reference": "6Workstation-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:60.7.0-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64"
        },
        "product_reference": "firefox-0:60.7.0-1.el6_10.x86_64",
        "relates_to_product_reference": "6Workstation-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo-0:60.7.0-1.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686"
        },
        "product_reference": "firefox-debuginfo-0:60.7.0-1.el6_10.i686",
        "relates_to_product_reference": "6Workstation-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo-0:60.7.0-1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64"
        },
        "product_reference": "firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
        "relates_to_product_reference": "6Workstation-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo-0:60.7.0-1.el6_10.s390x as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x"
        },
        "product_reference": "firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
        "relates_to_product_reference": "6Workstation-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo-0:60.7.0-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
        },
        "product_reference": "firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
        "relates_to_product_reference": "6Workstation-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:60.7.0-1.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
          "product_id": "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686"
        },
        "product_reference": "firefox-0:60.7.0-1.el6_10.i686",
        "relates_to_product_reference": "6Workstation-optional-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:60.7.0-1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
          "product_id": "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64"
        },
        "product_reference": "firefox-0:60.7.0-1.el6_10.ppc64",
        "relates_to_product_reference": "6Workstation-optional-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:60.7.0-1.el6_10.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
          "product_id": "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x"
        },
        "product_reference": "firefox-0:60.7.0-1.el6_10.s390x",
        "relates_to_product_reference": "6Workstation-optional-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:60.7.0-1.el6_10.src as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
          "product_id": "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src"
        },
        "product_reference": "firefox-0:60.7.0-1.el6_10.src",
        "relates_to_product_reference": "6Workstation-optional-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:60.7.0-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
          "product_id": "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64"
        },
        "product_reference": "firefox-0:60.7.0-1.el6_10.x86_64",
        "relates_to_product_reference": "6Workstation-optional-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo-0:60.7.0-1.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
          "product_id": "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686"
        },
        "product_reference": "firefox-debuginfo-0:60.7.0-1.el6_10.i686",
        "relates_to_product_reference": "6Workstation-optional-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo-0:60.7.0-1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
          "product_id": "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64"
        },
        "product_reference": "firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
        "relates_to_product_reference": "6Workstation-optional-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo-0:60.7.0-1.el6_10.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
          "product_id": "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x"
        },
        "product_reference": "firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
        "relates_to_product_reference": "6Workstation-optional-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo-0:60.7.0-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
          "product_id": "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
        },
        "product_reference": "firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
        "relates_to_product_reference": "6Workstation-optional-6.10.z"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2018-18511",
      "discovery_date": "2019-02-12T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1676997"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Cross-origin images can be read from a canvas element in violation of the same-origin policy using the transferFromImageBitmap method. *Note: This only affects Firefox 65. Previous versions are unaffected.*. This vulnerability affects Firefox \u003c 65.0.1.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "mozilla: Cross-origin theft of images with ImageBitmapRenderingContext",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
          "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
          "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
          "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.src",
          "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
          "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
          "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
          "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
          "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
          "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
          "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
          "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
          "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
          "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
          "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
          "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
          "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
          "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
          "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
          "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
          "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
          "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
          "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
          "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
          "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
          "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
          "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
          "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
          "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
          "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
          "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.src",
          "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
          "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
          "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
          "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
          "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
          "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
          "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
          "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
          "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
          "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
          "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
          "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
          "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
          "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
          "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
          "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
          "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
          "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.src",
          "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
          "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
          "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
          "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
          "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
          "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
          "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
          "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
          "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
          "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
          "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
          "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
          "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
          "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2018-18511"
        },
        {
          "category": "external",
          "summary": "RHBZ#1676997",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1676997"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2018-18511",
          "url": "https://www.cve.org/CVERecord?id=CVE-2018-18511"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-18511",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-18511"
        }
      ],
      "release_date": "2019-02-12T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-05-23T15:53:40+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
            "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
            "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
            "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
            "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
            "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
            "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:1267"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
            "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
            "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
            "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
            "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
            "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
            "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "mozilla: Cross-origin theft of images with ImageBitmapRenderingContext"
    },
    {
      "cve": "CVE-2019-5798",
      "discovery_date": "2019-03-13T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1688200"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Lack of correct bounds checking in Skia in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: Out of bounds read in Skia",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
          "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
          "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
          "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.src",
          "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
          "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
          "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
          "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
          "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
          "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
          "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
          "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
          "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
          "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
          "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
          "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
          "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
          "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
          "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
          "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
          "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
          "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
          "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
          "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
          "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
          "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
          "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
          "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
          "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
          "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
          "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.src",
          "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
          "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
          "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
          "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
          "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
          "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
          "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
          "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
          "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
          "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
          "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
          "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
          "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
          "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
          "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
          "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
          "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
          "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.src",
          "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
          "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
          "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
          "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
          "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
          "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
          "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
          "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
          "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
          "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
          "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
          "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
          "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
          "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-5798"
        },
        {
          "category": "external",
          "summary": "RHBZ#1688200",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1688200"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-5798",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-5798"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-5798",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5798"
        },
        {
          "category": "external",
          "summary": "https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html",
          "url": "https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html"
        }
      ],
      "release_date": "2019-03-12T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-05-23T15:53:40+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
            "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
            "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
            "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
            "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
            "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
            "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:1267"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
            "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
            "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
            "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
            "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
            "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
            "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "chromium-browser: Out of bounds read in Skia"
    },
    {
      "cve": "CVE-2019-7317",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-02-04T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1672409"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "libpng: use-after-free in png_image_free in png.c",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
          "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
          "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
          "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.src",
          "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
          "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
          "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
          "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
          "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
          "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
          "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
          "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
          "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
          "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
          "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
          "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
          "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
          "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
          "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
          "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
          "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
          "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
          "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
          "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
          "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
          "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
          "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
          "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
          "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
          "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
          "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.src",
          "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
          "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
          "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
          "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
          "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
          "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
          "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
          "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
          "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
          "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
          "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
          "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
          "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
          "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
          "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
          "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
          "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
          "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.src",
          "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
          "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
          "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
          "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
          "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
          "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
          "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
          "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
          "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
          "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
          "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
          "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
          "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
          "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-7317"
        },
        {
          "category": "external",
          "summary": "RHBZ#1672409",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1672409"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-7317",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-7317"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-7317",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-7317"
        }
      ],
      "release_date": "2019-01-25T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-05-23T15:53:40+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
            "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
            "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
            "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
            "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
            "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
            "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:1267"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
            "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
            "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
            "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
            "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
            "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
            "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "libpng: use-after-free in png_image_free in png.c"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "the Mozilla project"
          ]
        },
        {
          "names": [
            "AaylaSecura1138"
          ],
          "summary": "Acknowledged by upstream."
        }
      ],
      "cve": "CVE-2019-9797",
      "cwe": {
        "id": "CWE-829",
        "name": "Inclusion of Functionality from Untrusted Control Sphere"
      },
      "discovery_date": "2019-05-22T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1712622"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Cross-origin images can be read in violation of the same-origin policy by exporting an image after using createImageBitmap to read the image and then rendering the resulting bitmap image within a canvas element. This vulnerability affects Firefox \u003c 66.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla: Cross-origin theft of images with createImageBitmap",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
          "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
          "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
          "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.src",
          "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
          "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
          "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
          "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
          "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
          "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
          "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
          "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
          "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
          "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
          "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
          "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
          "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
          "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
          "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
          "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
          "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
          "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
          "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
          "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
          "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
          "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
          "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
          "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
          "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
          "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
          "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.src",
          "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
          "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
          "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
          "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
          "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
          "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
          "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
          "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
          "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
          "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
          "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
          "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
          "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
          "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
          "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
          "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
          "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
          "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.src",
          "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
          "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
          "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
          "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
          "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
          "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
          "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
          "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
          "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
          "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
          "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
          "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
          "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
          "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9797"
        },
        {
          "category": "external",
          "summary": "RHBZ#1712622",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712622"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9797",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9797"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9797",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9797"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9797",
          "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9797"
        }
      ],
      "release_date": "2019-05-22T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-05-23T15:53:40+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
            "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
            "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
            "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
            "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
            "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
            "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:1267"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
            "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
            "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
            "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
            "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
            "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
            "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "Mozilla: Cross-origin theft of images with createImageBitmap"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "the Mozilla project"
          ]
        },
        {
          "names": [
            "Olli Pettay",
            "Bogdan Tara",
            "Jan de Mooij",
            "Jason Kratzer",
            "Jan Varga",
            "Gary Kwong",
            "Tim Guan-tin Chien",
            "Tyson Smith",
            "Ronald Crane",
            "Ted Campbell"
          ],
          "summary": "Acknowledged by upstream."
        }
      ],
      "cve": "CVE-2019-9800",
      "cwe": {
        "id": "CWE-120",
        "name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
      },
      "discovery_date": "2019-05-22T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1712623"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Mozilla developers and community members reported memory safety bugs present in Firefox 66, Firefox ESR 60.6, and Thunderbird 60.6. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla: Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
          "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
          "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
          "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.src",
          "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
          "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
          "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
          "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
          "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
          "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
          "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
          "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
          "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
          "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
          "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
          "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
          "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
          "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
          "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
          "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
          "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
          "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
          "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
          "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
          "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
          "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
          "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
          "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
          "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
          "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
          "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.src",
          "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
          "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
          "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
          "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
          "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
          "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
          "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
          "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
          "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
          "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
          "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
          "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
          "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
          "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
          "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
          "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
          "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
          "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.src",
          "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
          "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
          "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
          "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
          "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
          "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
          "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
          "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
          "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
          "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
          "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
          "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
          "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
          "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9800"
        },
        {
          "category": "external",
          "summary": "RHBZ#1712623",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712623"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9800",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9800"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9800",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9800"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9800",
          "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9800"
        }
      ],
      "release_date": "2019-05-22T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-05-23T15:53:40+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
            "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
            "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
            "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
            "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
            "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
            "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:1267"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
            "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
            "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
            "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
            "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
            "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
            "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "Mozilla: Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "the Mozilla project"
          ]
        },
        {
          "names": [
            "Samuel Gro\u00df"
          ],
          "organization": "Google Project Zero",
          "summary": "Acknowledged by upstream."
        }
      ],
      "cve": "CVE-2019-9816",
      "cwe": {
        "id": "CWE-843",
        "name": "Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)"
      },
      "discovery_date": "2019-05-22T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1712625"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A possible vulnerability exists where type confusion can occur when manipulating JavaScript objects in object groups, allowing for the bypassing of security checks within these groups. *Note: this vulnerability has only been demonstrated with UnboxedObjects, which are disabled by default on all supported releases.*. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla: Type confusion with object groups and UnboxedObjects",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
          "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
          "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
          "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.src",
          "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
          "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
          "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
          "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
          "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
          "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
          "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
          "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
          "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
          "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
          "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
          "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
          "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
          "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
          "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
          "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
          "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
          "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
          "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
          "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
          "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
          "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
          "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
          "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
          "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
          "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
          "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.src",
          "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
          "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
          "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
          "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
          "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
          "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
          "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
          "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
          "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
          "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
          "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
          "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
          "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
          "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
          "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
          "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
          "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
          "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.src",
          "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
          "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
          "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
          "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
          "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
          "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
          "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
          "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
          "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
          "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
          "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
          "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
          "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
          "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9816"
        },
        {
          "category": "external",
          "summary": "RHBZ#1712625",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712625"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9816",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9816"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9816",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9816"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9816",
          "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9816"
        }
      ],
      "release_date": "2019-05-22T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-05-23T15:53:40+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
            "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
            "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
            "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
            "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
            "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
            "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:1267"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
            "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
            "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
            "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
            "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
            "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
            "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "Mozilla: Type confusion with object groups and UnboxedObjects"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "the Mozilla project"
          ]
        },
        {
          "names": [
            "Lu\u1eadt Nguy\u1ec5n"
          ],
          "summary": "Acknowledged by upstream."
        }
      ],
      "cve": "CVE-2019-9817",
      "cwe": {
        "id": "CWE-829",
        "name": "Inclusion of Functionality from Untrusted Control Sphere"
      },
      "discovery_date": "2019-05-22T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1712626"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Images from a different domain can be read using a canvas object in some circumstances. This could be used to steal image data from a different site in violation of same-origin policy. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla: Stealing of cross-domain images using canvas",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
          "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
          "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
          "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.src",
          "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
          "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
          "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
          "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
          "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
          "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
          "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
          "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
          "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
          "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
          "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
          "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
          "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
          "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
          "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
          "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
          "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
          "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
          "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
          "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
          "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
          "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
          "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
          "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
          "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
          "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
          "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.src",
          "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
          "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
          "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
          "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
          "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
          "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
          "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
          "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
          "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
          "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
          "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
          "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
          "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
          "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
          "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
          "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
          "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
          "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.src",
          "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
          "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
          "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
          "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
          "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
          "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
          "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
          "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
          "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
          "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
          "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
          "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
          "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
          "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9817"
        },
        {
          "category": "external",
          "summary": "RHBZ#1712626",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712626"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9817",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9817"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9817",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9817"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9817",
          "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9817"
        }
      ],
      "release_date": "2019-05-22T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-05-23T15:53:40+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
            "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
            "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
            "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
            "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
            "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
            "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:1267"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
            "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
            "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
            "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
            "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
            "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
            "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "Mozilla: Stealing of cross-domain images using canvas"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "the Mozilla project"
          ]
        },
        {
          "names": [
            "Nils"
          ],
          "summary": "Acknowledged by upstream."
        }
      ],
      "cve": "CVE-2019-9819",
      "cwe": {
        "id": "CWE-567",
        "name": "Unsynchronized Access to Shared Data in a Multithreaded Context"
      },
      "discovery_date": "2019-05-22T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1712628"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability where a JavaScript compartment mismatch can occur while working with the fetch API, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla: Compartment mismatch with fetch API",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
          "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
          "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
          "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.src",
          "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
          "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
          "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
          "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
          "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
          "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
          "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
          "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
          "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
          "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
          "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
          "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
          "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
          "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
          "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
          "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
          "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
          "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
          "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
          "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
          "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
          "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
          "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
          "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
          "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
          "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
          "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.src",
          "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
          "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
          "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
          "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
          "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
          "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
          "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
          "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
          "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
          "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
          "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
          "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
          "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
          "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
          "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
          "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
          "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
          "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.src",
          "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
          "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
          "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
          "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
          "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
          "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
          "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
          "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
          "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
          "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
          "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
          "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
          "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
          "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9819"
        },
        {
          "category": "external",
          "summary": "RHBZ#1712628",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712628"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9819",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9819"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9819",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9819"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9819",
          "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9819"
        }
      ],
      "release_date": "2019-05-22T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-05-23T15:53:40+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
            "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
            "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
            "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
            "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
            "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
            "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:1267"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
            "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
            "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
            "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
            "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
            "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
            "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "Mozilla: Compartment mismatch with fetch API"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "the Mozilla project"
          ]
        },
        {
          "names": [
            "Nils"
          ],
          "summary": "Acknowledged by upstream."
        }
      ],
      "cve": "CVE-2019-9820",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "discovery_date": "2019-05-22T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1712629"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A use-after-free vulnerability can occur in the chrome event handler when it is freed while still in use. This results in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla: Use-after-free of ChromeEventHandler by DocShell",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
          "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
          "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
          "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.src",
          "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
          "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
          "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
          "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
          "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
          "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
          "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
          "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
          "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
          "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
          "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
          "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
          "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
          "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
          "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
          "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
          "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
          "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
          "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
          "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
          "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
          "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
          "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
          "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
          "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
          "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
          "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.src",
          "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
          "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
          "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
          "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
          "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
          "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
          "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
          "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
          "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
          "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
          "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
          "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
          "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
          "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
          "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
          "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
          "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
          "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.src",
          "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
          "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
          "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
          "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
          "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
          "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
          "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
          "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
          "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
          "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
          "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
          "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
          "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
          "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9820"
        },
        {
          "category": "external",
          "summary": "RHBZ#1712629",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712629"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9820",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9820"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9820",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9820"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9820",
          "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9820"
        }
      ],
      "release_date": "2019-05-22T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-05-23T15:53:40+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
            "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
            "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
            "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
            "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
            "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
            "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:1267"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
            "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
            "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
            "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
            "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
            "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
            "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "Mozilla: Use-after-free of ChromeEventHandler by DocShell"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "the Mozilla project"
          ]
        },
        {
          "names": [
            "Nils"
          ],
          "summary": "Acknowledged by upstream."
        }
      ],
      "cve": "CVE-2019-11691",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "discovery_date": "2019-05-22T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1712617"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A use-after-free vulnerability can occur when working with XMLHttpRequest (XHR) in an event loop, causing the XHR main thread to be called after it has been freed. This results in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla: Use-after-free in XMLHttpRequest",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
          "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
          "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
          "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.src",
          "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
          "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
          "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
          "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
          "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
          "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
          "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
          "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
          "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
          "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
          "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
          "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
          "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
          "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
          "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
          "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
          "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
          "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
          "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
          "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
          "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
          "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
          "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
          "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
          "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
          "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
          "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.src",
          "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
          "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
          "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
          "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
          "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
          "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
          "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
          "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
          "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
          "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
          "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
          "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
          "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
          "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
          "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
          "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
          "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
          "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.src",
          "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
          "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
          "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
          "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
          "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
          "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
          "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
          "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
          "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
          "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
          "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
          "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
          "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
          "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-11691"
        },
        {
          "category": "external",
          "summary": "RHBZ#1712617",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712617"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-11691",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-11691"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-11691",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-11691"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11691",
          "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11691"
        }
      ],
      "release_date": "2019-05-22T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-05-23T15:53:40+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
            "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
            "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
            "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
            "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
            "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
            "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:1267"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
            "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
            "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
            "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
            "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
            "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
            "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "Mozilla: Use-after-free in XMLHttpRequest"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "the Mozilla project"
          ]
        },
        {
          "names": [
            "Nils"
          ],
          "summary": "Acknowledged by upstream."
        }
      ],
      "cve": "CVE-2019-11692",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "discovery_date": "2019-05-22T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1712618"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A use-after-free vulnerability can occur when listeners are removed from the event listener manager while still in use, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla: Use-after-free removing listeners in the event listener manager",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
          "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
          "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
          "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.src",
          "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
          "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
          "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
          "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
          "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
          "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
          "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
          "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
          "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
          "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
          "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
          "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
          "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
          "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
          "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
          "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
          "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
          "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
          "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
          "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
          "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
          "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
          "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
          "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
          "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
          "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
          "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.src",
          "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
          "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
          "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
          "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
          "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
          "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
          "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
          "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
          "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
          "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
          "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
          "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
          "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
          "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
          "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
          "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
          "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
          "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.src",
          "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
          "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
          "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
          "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
          "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
          "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
          "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
          "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
          "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
          "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
          "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
          "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
          "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
          "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-11692"
        },
        {
          "category": "external",
          "summary": "RHBZ#1712618",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712618"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-11692",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-11692"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-11692",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-11692"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11692",
          "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11692"
        }
      ],
      "release_date": "2019-05-22T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-05-23T15:53:40+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
            "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
            "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
            "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
            "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
            "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
            "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:1267"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
            "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
            "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
            "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
            "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
            "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
            "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "Mozilla: Use-after-free removing listeners in the event listener manager"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "the Mozilla project"
          ]
        },
        {
          "names": [
            "crixer"
          ],
          "summary": "Acknowledged by upstream."
        }
      ],
      "cve": "CVE-2019-11693",
      "cwe": {
        "id": "CWE-120",
        "name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
      },
      "discovery_date": "2019-05-22T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1712619"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The bufferdata function in WebGL is vulnerable to a buffer overflow with specific graphics drivers on Linux. This could result in malicious content freezing a tab or triggering a potentially exploitable crash. *Note: this issue only occurs on Linux. Other operating systems are unaffected.*. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla: Buffer overflow in WebGL bufferdata on Linux",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
          "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
          "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
          "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.src",
          "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
          "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
          "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
          "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
          "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
          "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
          "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
          "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
          "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
          "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
          "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
          "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
          "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
          "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
          "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
          "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
          "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
          "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
          "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
          "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
          "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
          "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
          "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
          "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
          "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
          "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
          "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.src",
          "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
          "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
          "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
          "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
          "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
          "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
          "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
          "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
          "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
          "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
          "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
          "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
          "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
          "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
          "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
          "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
          "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
          "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.src",
          "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
          "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
          "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
          "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
          "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
          "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
          "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
          "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
          "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
          "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
          "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
          "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
          "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
          "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-11693"
        },
        {
          "category": "external",
          "summary": "RHBZ#1712619",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712619"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-11693",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-11693"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-11693",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-11693"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11693",
          "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11693"
        }
      ],
      "release_date": "2019-05-22T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-05-23T15:53:40+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
            "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
            "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
            "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
            "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
            "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
            "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:1267"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
            "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
            "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
            "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
            "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
            "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
            "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "Mozilla: Buffer overflow in WebGL bufferdata on Linux"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "the Mozilla project"
          ]
        },
        {
          "names": [
            "Abdulrahman Alqabandi"
          ],
          "summary": "Acknowledged by upstream."
        }
      ],
      "cve": "CVE-2019-11698",
      "cwe": {
        "id": "CWE-829",
        "name": "Inclusion of Functionality from Untrusted Control Sphere"
      },
      "discovery_date": "2019-05-22T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1712621"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "If a crafted hyperlink is dragged and dropped to the bookmark bar or sidebar and the resulting bookmark is subsequently dragged and dropped into the web content area, an arbitrary query of a user\u0027s browser history can be run and transmitted to the content page via drop event data. This allows for the theft of browser history by a malicious site. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla: Theft of user history data through drag and drop of hyperlinks to and from bookmarks",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "In general, this flaw cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but it is potentially a risk in browser or browser-like contexts.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
          "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
          "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
          "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.src",
          "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
          "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
          "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
          "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
          "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
          "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
          "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
          "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
          "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
          "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
          "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
          "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
          "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
          "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
          "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
          "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
          "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
          "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
          "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
          "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
          "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
          "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
          "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
          "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
          "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
          "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
          "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.src",
          "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
          "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
          "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
          "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
          "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
          "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
          "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
          "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
          "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
          "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
          "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
          "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
          "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
          "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
          "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
          "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
          "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
          "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.src",
          "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
          "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
          "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
          "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
          "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
          "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
          "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
          "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
          "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
          "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
          "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
          "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
          "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
          "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-11698"
        },
        {
          "category": "external",
          "summary": "RHBZ#1712621",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1712621"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-11698",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-11698"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-11698",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-11698"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11698",
          "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11698"
        }
      ],
      "release_date": "2019-05-22T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-05-23T15:53:40+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
            "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
            "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
            "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
            "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
            "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
            "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:1267"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "version": "3.0"
          },
          "products": [
            "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6Client-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6Client-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
            "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6Client-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
            "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6ComputeNode-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
            "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6Server-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6Server-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
            "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6Server-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
            "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6Workstation-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64",
            "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.i686",
            "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.ppc64",
            "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.s390x",
            "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.src",
            "6Workstation-optional-6.10.z:firefox-0:60.7.0-1.el6_10.x86_64",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.i686",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.ppc64",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.s390x",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.7.0-1.el6_10.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "Mozilla: Theft of user history data through drag and drop of hyperlinks to and from bookmarks"
    }
  ]
}

CVE-2019-9820 (GCVE-0-2019-9820)

Vulnerability from cvelistv5

Published

2019-07-23 13:23

Modified

2024-08-04 22:01

Severity ?

CWE

Use-after-free of ChromeEventHandler by DocShell

Summary

A use-after-free vulnerability can occur in the chrome event handler when it is freed while still in use. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 60.7, Firefox < 67, and Firefox ESR < 60.7.

References

URL

Tags

	https://www.mozilla.org/security/advisories/mfsa2019-13/	x_refsource_MISC
	https://www.mozilla.org/security/advisories/mfsa2019-15/	x_refsource_MISC
	https://www.mozilla.org/security/advisories/mfsa2019-14/	x_refsource_MISC
	https://bugzilla.mozilla.org/show_bug.cgi?id=1536405	x_refsource_MISC

Impacted products

Vendor

Product

Version

Mozilla

Thunderbird

Version: unspecified < 60.7

	Mozilla	Firefox	Version: unspecified < 67
	Mozilla	Firefox ESR	Version: unspecified < 60.7

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T22:01:54.677Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2019-13/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2019-15/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2019-14/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1536405"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "60.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "67",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "60.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A use-after-free vulnerability can occur in the chrome event handler when it is freed while still in use. This results in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Use-after-free of ChromeEventHandler by DocShell",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-07-23T13:23:31",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2019-13/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2019-15/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2019-14/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1536405"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@mozilla.org",
          "ID": "CVE-2019-9820",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Thunderbird",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "60.7"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Firefox",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "67"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Firefox ESR",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "60.7"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Mozilla"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A use-after-free vulnerability can occur in the chrome event handler when it is freed while still in use. This results in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Use-after-free of ChromeEventHandler by DocShell"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2019-13/",
              "refsource": "MISC",
              "url": "https://www.mozilla.org/security/advisories/mfsa2019-13/"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2019-15/",
              "refsource": "MISC",
              "url": "https://www.mozilla.org/security/advisories/mfsa2019-15/"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2019-14/",
              "refsource": "MISC",
              "url": "https://www.mozilla.org/security/advisories/mfsa2019-14/"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1536405",
              "refsource": "MISC",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1536405"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2019-9820",
    "datePublished": "2019-07-23T13:23:31",
    "dateReserved": "2019-03-14T00:00:00",
    "dateUpdated": "2024-08-04T22:01:54.677Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2019-5798 (GCVE-0-2019-5798)

Vulnerability from cvelistv5

Published

2019-05-23 19:17

Modified

2024-08-04 20:09

Severity ?

CWE

Out of bounds read

Summary

Lack of correct bounds checking in Skia in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.

References

URL

Tags

	https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html	x_refsource_MISC
	https://crbug.com/883596	x_refsource_MISC
	https://www.debian.org/security/2019/dsa-4451	vendor-advisory, x_refsource_DEBIAN
	https://seclists.org/bugtraq/2019/May/67	mailing-list, x_refsource_BUGTRAQ
	https://lists.debian.org/debian-lts-announce/2019/05/msg00038.html	mailing-list, x_refsource_MLIST
	https://usn.ubuntu.com/3997-1/	vendor-advisory, x_refsource_UBUNTU
	http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00002.html	vendor-advisory, x_refsource_SUSE
	https://access.redhat.com/errata/RHSA-2019:1310	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2019:1308	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2019:1309	vendor-advisory, x_refsource_REDHAT
	http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00029.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00084.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00085.html	vendor-advisory, x_refsource_SUSE

Impacted products

	Vendor	Product	Version
	Google	Chrome	Version: prior to 73.0.3683.75

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T20:09:22.434Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://crbug.com/883596"
          },
          {
            "name": "DSA-4451",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2019/dsa-4451"
          },
          {
            "name": "20190527 [SECURITY] [DSA 4451-1] thunderbird security update",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "https://seclists.org/bugtraq/2019/May/67"
          },
          {
            "name": "[debian-lts-announce] 20190527 [SECURITY] [DLA 1806-1] thunderbird security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2019/05/msg00038.html"
          },
          {
            "name": "USN-3997-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3997-1/"
          },
          {
            "name": "openSUSE-SU-2019:1484",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00002.html"
          },
          {
            "name": "RHSA-2019:1310",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:1310"
          },
          {
            "name": "RHSA-2019:1308",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:1308"
          },
          {
            "name": "RHSA-2019:1309",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:1309"
          },
          {
            "name": "openSUSE-SU-2019:1534",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00029.html"
          },
          {
            "name": "openSUSE-SU-2019:1664",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00084.html"
          },
          {
            "name": "openSUSE-SU-2019:1666",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00085.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Chrome",
          "vendor": "Google",
          "versions": [
            {
              "status": "affected",
              "version": "prior to 73.0.3683.75"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Lack of correct bounds checking in Skia in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Out of bounds read",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-06-28T17:06:06",
        "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
        "shortName": "Chrome"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://crbug.com/883596"
        },
        {
          "name": "DSA-4451",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2019/dsa-4451"
        },
        {
          "name": "20190527 [SECURITY] [DSA 4451-1] thunderbird security update",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "https://seclists.org/bugtraq/2019/May/67"
        },
        {
          "name": "[debian-lts-announce] 20190527 [SECURITY] [DLA 1806-1] thunderbird security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2019/05/msg00038.html"
        },
        {
          "name": "USN-3997-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3997-1/"
        },
        {
          "name": "openSUSE-SU-2019:1484",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00002.html"
        },
        {
          "name": "RHSA-2019:1310",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:1310"
        },
        {
          "name": "RHSA-2019:1308",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:1308"
        },
        {
          "name": "RHSA-2019:1309",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:1309"
        },
        {
          "name": "openSUSE-SU-2019:1534",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00029.html"
        },
        {
          "name": "openSUSE-SU-2019:1664",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00084.html"
        },
        {
          "name": "openSUSE-SU-2019:1666",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00085.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@google.com",
          "ID": "CVE-2019-5798",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Chrome",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "prior to 73.0.3683.75"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Google"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Lack of correct bounds checking in Skia in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Out of bounds read"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html",
              "refsource": "MISC",
              "url": "https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html"
            },
            {
              "name": "https://crbug.com/883596",
              "refsource": "MISC",
              "url": "https://crbug.com/883596"
            },
            {
              "name": "DSA-4451",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2019/dsa-4451"
            },
            {
              "name": "20190527 [SECURITY] [DSA 4451-1] thunderbird security update",
              "refsource": "BUGTRAQ",
              "url": "https://seclists.org/bugtraq/2019/May/67"
            },
            {
              "name": "[debian-lts-announce] 20190527 [SECURITY] [DLA 1806-1] thunderbird security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2019/05/msg00038.html"
            },
            {
              "name": "USN-3997-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3997-1/"
            },
            {
              "name": "openSUSE-SU-2019:1484",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00002.html"
            },
            {
              "name": "RHSA-2019:1310",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:1310"
            },
            {
              "name": "RHSA-2019:1308",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:1308"
            },
            {
              "name": "RHSA-2019:1309",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:1309"
            },
            {
              "name": "openSUSE-SU-2019:1534",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00029.html"
            },
            {
              "name": "openSUSE-SU-2019:1664",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00084.html"
            },
            {
              "name": "openSUSE-SU-2019:1666",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00085.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
    "assignerShortName": "Chrome",
    "cveId": "CVE-2019-5798",
    "datePublished": "2019-05-23T19:17:29",
    "dateReserved": "2019-01-09T00:00:00",
    "dateUpdated": "2024-08-04T20:09:22.434Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2019-11692 (GCVE-0-2019-11692)

Vulnerability from cvelistv5

Published

2019-07-23 13:23

Modified

2024-08-04 23:03

Severity ?

CWE

Use-after-free removing listeners in the event listener manager

Summary

A use-after-free vulnerability can occur when listeners are removed from the event listener manager while still in use, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird < 60.7, Firefox < 67, and Firefox ESR < 60.7.

References

URL

Tags

	https://www.mozilla.org/security/advisories/mfsa2019-13/	x_refsource_MISC
	https://www.mozilla.org/security/advisories/mfsa2019-15/	x_refsource_MISC
	https://www.mozilla.org/security/advisories/mfsa2019-14/	x_refsource_MISC
	https://bugzilla.mozilla.org/show_bug.cgi?id=1544670	x_refsource_MISC

Impacted products

Vendor

Product

Version

Mozilla

Thunderbird

Version: unspecified < 60.7

	Mozilla	Firefox	Version: unspecified < 67
	Mozilla	Firefox ESR	Version: unspecified < 60.7

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T23:03:32.472Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2019-13/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2019-15/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2019-14/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1544670"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "60.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "67",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "60.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A use-after-free vulnerability can occur when listeners are removed from the event listener manager while still in use, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Use-after-free removing listeners in the event listener manager",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-07-23T13:23:02",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2019-13/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2019-15/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2019-14/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1544670"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@mozilla.org",
          "ID": "CVE-2019-11692",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Thunderbird",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "60.7"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Firefox",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "67"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Firefox ESR",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "60.7"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Mozilla"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A use-after-free vulnerability can occur when listeners are removed from the event listener manager while still in use, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Use-after-free removing listeners in the event listener manager"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2019-13/",
              "refsource": "MISC",
              "url": "https://www.mozilla.org/security/advisories/mfsa2019-13/"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2019-15/",
              "refsource": "MISC",
              "url": "https://www.mozilla.org/security/advisories/mfsa2019-15/"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2019-14/",
              "refsource": "MISC",
              "url": "https://www.mozilla.org/security/advisories/mfsa2019-14/"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1544670",
              "refsource": "MISC",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1544670"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2019-11692",
    "datePublished": "2019-07-23T13:23:02",
    "dateReserved": "2019-05-03T00:00:00",
    "dateUpdated": "2024-08-04T23:03:32.472Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2019-11693 (GCVE-0-2019-11693)

Vulnerability from cvelistv5

Published

2019-07-23 13:22

Modified

2024-08-04 23:03

Severity ?

CWE

Buffer overflow in WebGL bufferdata on Linux

Summary

The bufferdata function in WebGL is vulnerable to a buffer overflow with specific graphics drivers on Linux. This could result in malicious content freezing a tab or triggering a potentially exploitable crash. *Note: this issue only occurs on Linux. Other operating systems are unaffected.*. This vulnerability affects Thunderbird < 60.7, Firefox < 67, and Firefox ESR < 60.7.

References

URL

Tags

	https://www.mozilla.org/security/advisories/mfsa2019-13/	x_refsource_MISC
	https://www.mozilla.org/security/advisories/mfsa2019-15/	x_refsource_MISC
	https://www.mozilla.org/security/advisories/mfsa2019-14/	x_refsource_MISC
	https://bugzilla.mozilla.org/show_bug.cgi?id=1532525	x_refsource_MISC

Impacted products

Vendor

Product

Version

Mozilla

Thunderbird

Version: unspecified < 60.7

	Mozilla	Firefox	Version: unspecified < 67
	Mozilla	Firefox ESR	Version: unspecified < 60.7

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T23:03:32.198Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2019-13/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2019-15/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2019-14/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1532525"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "60.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "67",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "60.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The bufferdata function in WebGL is vulnerable to a buffer overflow with specific graphics drivers on Linux. This could result in malicious content freezing a tab or triggering a potentially exploitable crash. *Note: this issue only occurs on Linux. Other operating systems are unaffected.*. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Buffer overflow in WebGL bufferdata on Linux",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-07-23T13:22:53",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2019-13/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2019-15/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2019-14/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1532525"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@mozilla.org",
          "ID": "CVE-2019-11693",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Thunderbird",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "60.7"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Firefox",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "67"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Firefox ESR",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "60.7"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Mozilla"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The bufferdata function in WebGL is vulnerable to a buffer overflow with specific graphics drivers on Linux. This could result in malicious content freezing a tab or triggering a potentially exploitable crash. *Note: this issue only occurs on Linux. Other operating systems are unaffected.*. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Buffer overflow in WebGL bufferdata on Linux"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2019-13/",
              "refsource": "MISC",
              "url": "https://www.mozilla.org/security/advisories/mfsa2019-13/"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2019-15/",
              "refsource": "MISC",
              "url": "https://www.mozilla.org/security/advisories/mfsa2019-15/"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2019-14/",
              "refsource": "MISC",
              "url": "https://www.mozilla.org/security/advisories/mfsa2019-14/"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1532525",
              "refsource": "MISC",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1532525"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2019-11693",
    "datePublished": "2019-07-23T13:22:53",
    "dateReserved": "2019-05-03T00:00:00",
    "dateUpdated": "2024-08-04T23:03:32.198Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2019-9817 (GCVE-0-2019-9817)

Vulnerability from cvelistv5

Published

2019-07-23 13:24

Modified

2024-08-04 22:01

Severity ?

CWE

Stealing of cross-domain images using canvas

Summary

Images from a different domain can be read using a canvas object in some circumstances. This could be used to steal image data from a different site in violation of same-origin policy. This vulnerability affects Thunderbird < 60.7, Firefox < 67, and Firefox ESR < 60.7.

References

URL

Tags

	https://www.mozilla.org/security/advisories/mfsa2019-13/	x_refsource_MISC
	https://www.mozilla.org/security/advisories/mfsa2019-15/	x_refsource_MISC
	https://www.mozilla.org/security/advisories/mfsa2019-14/	x_refsource_MISC
	https://bugzilla.mozilla.org/show_bug.cgi?id=1540221	x_refsource_MISC

Impacted products

Vendor

Product

Version

Mozilla

Thunderbird

Version: unspecified < 60.7

	Mozilla	Firefox	Version: unspecified < 67
	Mozilla	Firefox ESR	Version: unspecified < 60.7

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T22:01:54.839Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2019-13/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2019-15/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2019-14/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1540221"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "60.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "67",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "60.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Images from a different domain can be read using a canvas object in some circumstances. This could be used to steal image data from a different site in violation of same-origin policy. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Stealing of cross-domain images using canvas",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-07-23T13:24:05",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2019-13/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2019-15/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2019-14/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1540221"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@mozilla.org",
          "ID": "CVE-2019-9817",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Thunderbird",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "60.7"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Firefox",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "67"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Firefox ESR",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "60.7"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Mozilla"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Images from a different domain can be read using a canvas object in some circumstances. This could be used to steal image data from a different site in violation of same-origin policy. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Stealing of cross-domain images using canvas"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2019-13/",
              "refsource": "MISC",
              "url": "https://www.mozilla.org/security/advisories/mfsa2019-13/"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2019-15/",
              "refsource": "MISC",
              "url": "https://www.mozilla.org/security/advisories/mfsa2019-15/"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2019-14/",
              "refsource": "MISC",
              "url": "https://www.mozilla.org/security/advisories/mfsa2019-14/"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1540221",
              "refsource": "MISC",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1540221"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2019-9817",
    "datePublished": "2019-07-23T13:24:05",
    "dateReserved": "2019-03-14T00:00:00",
    "dateUpdated": "2024-08-04T22:01:54.839Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2019-7317 (GCVE-0-2019-7317)

Vulnerability from cvelistv5

Published

2019-02-04 07:00

Modified

2024-08-04 20:46

Severity ?

CWE

Summary

png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute.

References

URL

Tags

	https://seclists.org/bugtraq/2019/Apr/30	mailing-list, x_refsource_BUGTRAQ
	https://www.debian.org/security/2019/dsa-4435	vendor-advisory, x_refsource_DEBIAN
	https://seclists.org/bugtraq/2019/Apr/36	mailing-list, x_refsource_BUGTRAQ
	https://usn.ubuntu.com/3962-1/	vendor-advisory, x_refsource_UBUNTU
	https://usn.ubuntu.com/3991-1/	vendor-advisory, x_refsource_UBUNTU
	https://seclists.org/bugtraq/2019/May/56	mailing-list, x_refsource_BUGTRAQ
	https://seclists.org/bugtraq/2019/May/59	mailing-list, x_refsource_BUGTRAQ
	https://www.debian.org/security/2019/dsa-4448	vendor-advisory, x_refsource_DEBIAN
	https://lists.debian.org/debian-lts-announce/2019/05/msg00032.html	mailing-list, x_refsource_MLIST
	https://access.redhat.com/errata/RHSA-2019:1265	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2019:1267	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2019:1269	vendor-advisory, x_refsource_REDHAT
	https://www.debian.org/security/2019/dsa-4451	vendor-advisory, x_refsource_DEBIAN
	https://seclists.org/bugtraq/2019/May/67	mailing-list, x_refsource_BUGTRAQ
	https://lists.debian.org/debian-lts-announce/2019/05/msg00038.html	mailing-list, x_refsource_MLIST
	https://usn.ubuntu.com/3997-1/	vendor-advisory, x_refsource_UBUNTU
	http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00002.html	vendor-advisory, x_refsource_SUSE
	https://access.redhat.com/errata/RHSA-2019:1310	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2019:1308	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2019:1309	vendor-advisory, x_refsource_REDHAT
	http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00029.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00084.html	vendor-advisory, x_refsource_SUSE
	http://www.securityfocus.com/bid/108098	vdb-entry, x_refsource_BID
	https://usn.ubuntu.com/4080-1/	vendor-advisory, x_refsource_UBUNTU
	https://usn.ubuntu.com/4083-1/	vendor-advisory, x_refsource_UBUNTU
	https://security.gentoo.org/glsa/201908-02	vendor-advisory, x_refsource_GENTOO
	https://access.redhat.com/errata/RHSA-2019:2494	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2019:2495	vendor-advisory, x_refsource_REDHAT
	http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00038.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00044.html	vendor-advisory, x_refsource_SUSE
	https://access.redhat.com/errata/RHSA-2019:2585	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2019:2590	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2019:2592	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2019:2737	vendor-advisory, x_refsource_REDHAT
	https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html	x_refsource_MISC
	https://www.oracle.com/security-alerts/cpuApr2021.html	x_refsource_MISC
	https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=12803	x_refsource_MISC
	https://github.com/glennrp/libpng/issues/275	x_refsource_MISC
	http://packetstormsecurity.com/files/152561/Slackware-Security-Advisory-libpng-Updates.html	x_refsource_MISC
	https://security.netapp.com/advisory/ntap-20190719-0005/	x_refsource_CONFIRM
	https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03977en_us	x_refsource_CONFIRM
	https://www.oracle.com/security-alerts/cpuoct2021.html	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T20:46:45.928Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "20190417 [slackware-security] libpng (SSA:2019-107-01)",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "https://seclists.org/bugtraq/2019/Apr/30"
          },
          {
            "name": "DSA-4435",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2019/dsa-4435"
          },
          {
            "name": "20190429 [SECURITY] [DSA 4435-1] libpng1.6 security update",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "https://seclists.org/bugtraq/2019/Apr/36"
          },
          {
            "name": "USN-3962-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3962-1/"
          },
          {
            "name": "USN-3991-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3991-1/"
          },
          {
            "name": "20190522 [slackware-security] mozilla-firefox (SSA:2019-141-01)",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "https://seclists.org/bugtraq/2019/May/56"
          },
          {
            "name": "20190523 [SECURITY] [DSA 4448-1] firefox-esr security update",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "https://seclists.org/bugtraq/2019/May/59"
          },
          {
            "name": "DSA-4448",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2019/dsa-4448"
          },
          {
            "name": "[debian-lts-announce] 20190523 [SECURITY] [DLA 1800-1] firefox-esr security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2019/05/msg00032.html"
          },
          {
            "name": "RHSA-2019:1265",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:1265"
          },
          {
            "name": "RHSA-2019:1267",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:1267"
          },
          {
            "name": "RHSA-2019:1269",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:1269"
          },
          {
            "name": "DSA-4451",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2019/dsa-4451"
          },
          {
            "name": "20190527 [SECURITY] [DSA 4451-1] thunderbird security update",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "https://seclists.org/bugtraq/2019/May/67"
          },
          {
            "name": "[debian-lts-announce] 20190527 [SECURITY] [DLA 1806-1] thunderbird security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2019/05/msg00038.html"
          },
          {
            "name": "USN-3997-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3997-1/"
          },
          {
            "name": "openSUSE-SU-2019:1484",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00002.html"
          },
          {
            "name": "RHSA-2019:1310",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:1310"
          },
          {
            "name": "RHSA-2019:1308",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:1308"
          },
          {
            "name": "RHSA-2019:1309",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:1309"
          },
          {
            "name": "openSUSE-SU-2019:1534",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00029.html"
          },
          {
            "name": "openSUSE-SU-2019:1664",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00084.html"
          },
          {
            "name": "108098",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/108098"
          },
          {
            "name": "USN-4080-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4080-1/"
          },
          {
            "name": "USN-4083-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4083-1/"
          },
          {
            "name": "GLSA-201908-02",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201908-02"
          },
          {
            "name": "RHSA-2019:2494",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:2494"
          },
          {
            "name": "RHSA-2019:2495",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:2495"
          },
          {
            "name": "openSUSE-SU-2019:1916",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00038.html"
          },
          {
            "name": "openSUSE-SU-2019:1912",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00044.html"
          },
          {
            "name": "RHSA-2019:2585",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:2585"
          },
          {
            "name": "RHSA-2019:2590",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:2590"
          },
          {
            "name": "RHSA-2019:2592",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:2592"
          },
          {
            "name": "RHSA-2019:2737",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:2737"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.oracle.com/security-alerts/cpuApr2021.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=12803"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/glennrp/libpng/issues/275"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://packetstormsecurity.com/files/152561/Slackware-Security-Advisory-libpng-Updates.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20190719-0005/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbst03977en_us"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.oracle.com/security-alerts/cpuoct2021.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2019-02-04T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2021-10-20T10:38:36",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "20190417 [slackware-security] libpng (SSA:2019-107-01)",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "https://seclists.org/bugtraq/2019/Apr/30"
        },
        {
          "name": "DSA-4435",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2019/dsa-4435"
        },
        {
          "name": "20190429 [SECURITY] [DSA 4435-1] libpng1.6 security update",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "https://seclists.org/bugtraq/2019/Apr/36"
        },
        {
          "name": "USN-3962-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3962-1/"
        },
        {
          "name": "USN-3991-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3991-1/"
        },
        {
          "name": "20190522 [slackware-security] mozilla-firefox (SSA:2019-141-01)",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "https://seclists.org/bugtraq/2019/May/56"
        },
        {
          "name": "20190523 [SECURITY] [DSA 4448-1] firefox-esr security update",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "https://seclists.org/bugtraq/2019/May/59"
        },
        {
          "name": "DSA-4448",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2019/dsa-4448"
        },
        {
          "name": "[debian-lts-announce] 20190523 [SECURITY] [DLA 1800-1] firefox-esr security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2019/05/msg00032.html"
        },
        {
          "name": "RHSA-2019:1265",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:1265"
        },
        {
          "name": "RHSA-2019:1267",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:1267"
        },
        {
          "name": "RHSA-2019:1269",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:1269"
        },
        {
          "name": "DSA-4451",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2019/dsa-4451"
        },
        {
          "name": "20190527 [SECURITY] [DSA 4451-1] thunderbird security update",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "https://seclists.org/bugtraq/2019/May/67"
        },
        {
          "name": "[debian-lts-announce] 20190527 [SECURITY] [DLA 1806-1] thunderbird security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2019/05/msg00038.html"
        },
        {
          "name": "USN-3997-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3997-1/"
        },
        {
          "name": "openSUSE-SU-2019:1484",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00002.html"
        },
        {
          "name": "RHSA-2019:1310",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:1310"
        },
        {
          "name": "RHSA-2019:1308",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:1308"
        },
        {
          "name": "RHSA-2019:1309",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:1309"
        },
        {
          "name": "openSUSE-SU-2019:1534",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00029.html"
        },
        {
          "name": "openSUSE-SU-2019:1664",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00084.html"
        },
        {
          "name": "108098",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/108098"
        },
        {
          "name": "USN-4080-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4080-1/"
        },
        {
          "name": "USN-4083-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4083-1/"
        },
        {
          "name": "GLSA-201908-02",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201908-02"
        },
        {
          "name": "RHSA-2019:2494",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:2494"
        },
        {
          "name": "RHSA-2019:2495",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:2495"
        },
        {
          "name": "openSUSE-SU-2019:1916",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00038.html"
        },
        {
          "name": "openSUSE-SU-2019:1912",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00044.html"
        },
        {
          "name": "RHSA-2019:2585",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:2585"
        },
        {
          "name": "RHSA-2019:2590",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:2590"
        },
        {
          "name": "RHSA-2019:2592",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:2592"
        },
        {
          "name": "RHSA-2019:2737",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:2737"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.oracle.com/security-alerts/cpuApr2021.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=12803"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/glennrp/libpng/issues/275"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://packetstormsecurity.com/files/152561/Slackware-Security-Advisory-libpng-Updates.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://security.netapp.com/advisory/ntap-20190719-0005/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbst03977en_us"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.oracle.com/security-alerts/cpuoct2021.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2019-7317",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "20190417 [slackware-security] libpng (SSA:2019-107-01)",
              "refsource": "BUGTRAQ",
              "url": "https://seclists.org/bugtraq/2019/Apr/30"
            },
            {
              "name": "DSA-4435",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2019/dsa-4435"
            },
            {
              "name": "20190429 [SECURITY] [DSA 4435-1] libpng1.6 security update",
              "refsource": "BUGTRAQ",
              "url": "https://seclists.org/bugtraq/2019/Apr/36"
            },
            {
              "name": "USN-3962-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3962-1/"
            },
            {
              "name": "USN-3991-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3991-1/"
            },
            {
              "name": "20190522 [slackware-security] mozilla-firefox (SSA:2019-141-01)",
              "refsource": "BUGTRAQ",
              "url": "https://seclists.org/bugtraq/2019/May/56"
            },
            {
              "name": "20190523 [SECURITY] [DSA 4448-1] firefox-esr security update",
              "refsource": "BUGTRAQ",
              "url": "https://seclists.org/bugtraq/2019/May/59"
            },
            {
              "name": "DSA-4448",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2019/dsa-4448"
            },
            {
              "name": "[debian-lts-announce] 20190523 [SECURITY] [DLA 1800-1] firefox-esr security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2019/05/msg00032.html"
            },
            {
              "name": "RHSA-2019:1265",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:1265"
            },
            {
              "name": "RHSA-2019:1267",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:1267"
            },
            {
              "name": "RHSA-2019:1269",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:1269"
            },
            {
              "name": "DSA-4451",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2019/dsa-4451"
            },
            {
              "name": "20190527 [SECURITY] [DSA 4451-1] thunderbird security update",
              "refsource": "BUGTRAQ",
              "url": "https://seclists.org/bugtraq/2019/May/67"
            },
            {
              "name": "[debian-lts-announce] 20190527 [SECURITY] [DLA 1806-1] thunderbird security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2019/05/msg00038.html"
            },
            {
              "name": "USN-3997-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3997-1/"
            },
            {
              "name": "openSUSE-SU-2019:1484",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00002.html"
            },
            {
              "name": "RHSA-2019:1310",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:1310"
            },
            {
              "name": "RHSA-2019:1308",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:1308"
            },
            {
              "name": "RHSA-2019:1309",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:1309"
            },
            {
              "name": "openSUSE-SU-2019:1534",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00029.html"
            },
            {
              "name": "openSUSE-SU-2019:1664",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00084.html"
            },
            {
              "name": "108098",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/108098"
            },
            {
              "name": "USN-4080-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4080-1/"
            },
            {
              "name": "USN-4083-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4083-1/"
            },
            {
              "name": "GLSA-201908-02",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201908-02"
            },
            {
              "name": "RHSA-2019:2494",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:2494"
            },
            {
              "name": "RHSA-2019:2495",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:2495"
            },
            {
              "name": "openSUSE-SU-2019:1916",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00038.html"
            },
            {
              "name": "openSUSE-SU-2019:1912",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00044.html"
            },
            {
              "name": "RHSA-2019:2585",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:2585"
            },
            {
              "name": "RHSA-2019:2590",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:2590"
            },
            {
              "name": "RHSA-2019:2592",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:2592"
            },
            {
              "name": "RHSA-2019:2737",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:2737"
            },
            {
              "name": "https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html",
              "refsource": "MISC",
              "url": "https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html"
            },
            {
              "name": "https://www.oracle.com/security-alerts/cpuApr2021.html",
              "refsource": "MISC",
              "url": "https://www.oracle.com/security-alerts/cpuApr2021.html"
            },
            {
              "name": "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=12803",
              "refsource": "MISC",
              "url": "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=12803"
            },
            {
              "name": "https://github.com/glennrp/libpng/issues/275",
              "refsource": "MISC",
              "url": "https://github.com/glennrp/libpng/issues/275"
            },
            {
              "name": "http://packetstormsecurity.com/files/152561/Slackware-Security-Advisory-libpng-Updates.html",
              "refsource": "MISC",
              "url": "http://packetstormsecurity.com/files/152561/Slackware-Security-Advisory-libpng-Updates.html"
            },
            {
              "name": "https://security.netapp.com/advisory/ntap-20190719-0005/",
              "refsource": "CONFIRM",
              "url": "https://security.netapp.com/advisory/ntap-20190719-0005/"
            },
            {
              "name": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbst03977en_us",
              "refsource": "CONFIRM",
              "url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbst03977en_us"
            },
            {
              "name": "https://www.oracle.com/security-alerts/cpuoct2021.html",
              "refsource": "MISC",
              "url": "https://www.oracle.com/security-alerts/cpuoct2021.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2019-7317",
    "datePublished": "2019-02-04T07:00:00",
    "dateReserved": "2019-02-04T00:00:00",
    "dateUpdated": "2024-08-04T20:46:45.928Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2019-9819 (GCVE-0-2019-9819)

Vulnerability from cvelistv5

Published

2019-07-23 13:23

Modified

2024-08-04 22:01

Severity ?

CWE

Compartment mismatch with fetch API

Summary

A vulnerability where a JavaScript compartment mismatch can occur while working with the fetch API, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird < 60.7, Firefox < 67, and Firefox ESR < 60.7.

References

URL

Tags

	https://www.mozilla.org/security/advisories/mfsa2019-13/	x_refsource_MISC
	https://www.mozilla.org/security/advisories/mfsa2019-15/	x_refsource_MISC
	https://www.mozilla.org/security/advisories/mfsa2019-14/	x_refsource_MISC
	https://bugzilla.mozilla.org/show_bug.cgi?id=1532553	x_refsource_MISC

Impacted products

Vendor

Product

Version

Mozilla

Thunderbird

Version: unspecified < 60.7

	Mozilla	Firefox	Version: unspecified < 67
	Mozilla	Firefox ESR	Version: unspecified < 60.7

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T22:01:54.971Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2019-13/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2019-15/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2019-14/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1532553"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "60.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "67",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "60.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability where a JavaScript compartment mismatch can occur while working with the fetch API, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Compartment mismatch with fetch API",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-07-23T13:23:43",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2019-13/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2019-15/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2019-14/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1532553"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@mozilla.org",
          "ID": "CVE-2019-9819",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Thunderbird",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "60.7"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Firefox",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "67"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Firefox ESR",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "60.7"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Mozilla"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A vulnerability where a JavaScript compartment mismatch can occur while working with the fetch API, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Compartment mismatch with fetch API"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2019-13/",
              "refsource": "MISC",
              "url": "https://www.mozilla.org/security/advisories/mfsa2019-13/"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2019-15/",
              "refsource": "MISC",
              "url": "https://www.mozilla.org/security/advisories/mfsa2019-15/"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2019-14/",
              "refsource": "MISC",
              "url": "https://www.mozilla.org/security/advisories/mfsa2019-14/"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1532553",
              "refsource": "MISC",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1532553"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2019-9819",
    "datePublished": "2019-07-23T13:23:43",
    "dateReserved": "2019-03-14T00:00:00",
    "dateUpdated": "2024-08-04T22:01:54.971Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2019-9797 (GCVE-0-2019-9797)

Vulnerability from cvelistv5

Published

2019-04-26 16:13

Modified

2024-08-04 22:01

Severity ?

CWE

Cross-origin theft of images with createImageBitmap

Summary

Cross-origin images can be read in violation of the same-origin policy by exporting an image after using createImageBitmap to read the image and then rendering the resulting bitmap image within a canvas element. This vulnerability affects Firefox < 66.

References

URL

Tags

	https://www.mozilla.org/security/advisories/mfsa2019-07/	x_refsource_MISC
	https://bugzilla.mozilla.org/show_bug.cgi?id=1528909	x_refsource_MISC
	https://seclists.org/bugtraq/2019/May/56	mailing-list, x_refsource_BUGTRAQ
	https://seclists.org/bugtraq/2019/May/59	mailing-list, x_refsource_BUGTRAQ
	https://www.debian.org/security/2019/dsa-4448	vendor-advisory, x_refsource_DEBIAN
	https://lists.debian.org/debian-lts-announce/2019/05/msg00032.html	mailing-list, x_refsource_MLIST
	https://access.redhat.com/errata/RHSA-2019:1265	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2019:1267	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2019:1269	vendor-advisory, x_refsource_REDHAT
	https://www.debian.org/security/2019/dsa-4451	vendor-advisory, x_refsource_DEBIAN
	https://seclists.org/bugtraq/2019/May/67	mailing-list, x_refsource_BUGTRAQ
	https://lists.debian.org/debian-lts-announce/2019/05/msg00038.html	mailing-list, x_refsource_MLIST
	https://usn.ubuntu.com/3997-1/	vendor-advisory, x_refsource_UBUNTU
	http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00002.html	vendor-advisory, x_refsource_SUSE
	https://access.redhat.com/errata/RHSA-2019:1310	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2019:1308	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2019:1309	vendor-advisory, x_refsource_REDHAT
	http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00029.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00084.html	vendor-advisory, x_refsource_SUSE

Impacted products

	Vendor	Product	Version
	Mozilla	Firefox	Version: unspecified < 66

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T22:01:54.947Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2019-07/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1528909"
          },
          {
            "name": "20190522 [slackware-security] mozilla-firefox (SSA:2019-141-01)",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "https://seclists.org/bugtraq/2019/May/56"
          },
          {
            "name": "20190523 [SECURITY] [DSA 4448-1] firefox-esr security update",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "https://seclists.org/bugtraq/2019/May/59"
          },
          {
            "name": "DSA-4448",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2019/dsa-4448"
          },
          {
            "name": "[debian-lts-announce] 20190523 [SECURITY] [DLA 1800-1] firefox-esr security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2019/05/msg00032.html"
          },
          {
            "name": "RHSA-2019:1265",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:1265"
          },
          {
            "name": "RHSA-2019:1267",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:1267"
          },
          {
            "name": "RHSA-2019:1269",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:1269"
          },
          {
            "name": "DSA-4451",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2019/dsa-4451"
          },
          {
            "name": "20190527 [SECURITY] [DSA 4451-1] thunderbird security update",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "https://seclists.org/bugtraq/2019/May/67"
          },
          {
            "name": "[debian-lts-announce] 20190527 [SECURITY] [DLA 1806-1] thunderbird security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2019/05/msg00038.html"
          },
          {
            "name": "USN-3997-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3997-1/"
          },
          {
            "name": "openSUSE-SU-2019:1484",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00002.html"
          },
          {
            "name": "RHSA-2019:1310",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:1310"
          },
          {
            "name": "RHSA-2019:1308",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:1308"
          },
          {
            "name": "RHSA-2019:1309",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:1309"
          },
          {
            "name": "openSUSE-SU-2019:1534",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00029.html"
          },
          {
            "name": "openSUSE-SU-2019:1664",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00084.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "66",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Cross-origin images can be read in violation of the same-origin policy by exporting an image after using createImageBitmap to read the image and then rendering the resulting bitmap image within a canvas element. This vulnerability affects Firefox \u003c 66."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Cross-origin theft of images with createImageBitmap",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-06-28T14:06:06",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2019-07/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1528909"
        },
        {
          "name": "20190522 [slackware-security] mozilla-firefox (SSA:2019-141-01)",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "https://seclists.org/bugtraq/2019/May/56"
        },
        {
          "name": "20190523 [SECURITY] [DSA 4448-1] firefox-esr security update",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "https://seclists.org/bugtraq/2019/May/59"
        },
        {
          "name": "DSA-4448",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2019/dsa-4448"
        },
        {
          "name": "[debian-lts-announce] 20190523 [SECURITY] [DLA 1800-1] firefox-esr security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2019/05/msg00032.html"
        },
        {
          "name": "RHSA-2019:1265",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:1265"
        },
        {
          "name": "RHSA-2019:1267",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:1267"
        },
        {
          "name": "RHSA-2019:1269",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:1269"
        },
        {
          "name": "DSA-4451",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2019/dsa-4451"
        },
        {
          "name": "20190527 [SECURITY] [DSA 4451-1] thunderbird security update",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "https://seclists.org/bugtraq/2019/May/67"
        },
        {
          "name": "[debian-lts-announce] 20190527 [SECURITY] [DLA 1806-1] thunderbird security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2019/05/msg00038.html"
        },
        {
          "name": "USN-3997-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3997-1/"
        },
        {
          "name": "openSUSE-SU-2019:1484",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00002.html"
        },
        {
          "name": "RHSA-2019:1310",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:1310"
        },
        {
          "name": "RHSA-2019:1308",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:1308"
        },
        {
          "name": "RHSA-2019:1309",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:1309"
        },
        {
          "name": "openSUSE-SU-2019:1534",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00029.html"
        },
        {
          "name": "openSUSE-SU-2019:1664",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00084.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@mozilla.org",
          "ID": "CVE-2019-9797",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Firefox",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "66"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Mozilla"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Cross-origin images can be read in violation of the same-origin policy by exporting an image after using createImageBitmap to read the image and then rendering the resulting bitmap image within a canvas element. This vulnerability affects Firefox \u003c 66."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Cross-origin theft of images with createImageBitmap"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2019-07/",
              "refsource": "MISC",
              "url": "https://www.mozilla.org/security/advisories/mfsa2019-07/"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1528909",
              "refsource": "MISC",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1528909"
            },
            {
              "name": "20190522 [slackware-security] mozilla-firefox (SSA:2019-141-01)",
              "refsource": "BUGTRAQ",
              "url": "https://seclists.org/bugtraq/2019/May/56"
            },
            {
              "name": "20190523 [SECURITY] [DSA 4448-1] firefox-esr security update",
              "refsource": "BUGTRAQ",
              "url": "https://seclists.org/bugtraq/2019/May/59"
            },
            {
              "name": "DSA-4448",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2019/dsa-4448"
            },
            {
              "name": "[debian-lts-announce] 20190523 [SECURITY] [DLA 1800-1] firefox-esr security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2019/05/msg00032.html"
            },
            {
              "name": "RHSA-2019:1265",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:1265"
            },
            {
              "name": "RHSA-2019:1267",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:1267"
            },
            {
              "name": "RHSA-2019:1269",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:1269"
            },
            {
              "name": "DSA-4451",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2019/dsa-4451"
            },
            {
              "name": "20190527 [SECURITY] [DSA 4451-1] thunderbird security update",
              "refsource": "BUGTRAQ",
              "url": "https://seclists.org/bugtraq/2019/May/67"
            },
            {
              "name": "[debian-lts-announce] 20190527 [SECURITY] [DLA 1806-1] thunderbird security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2019/05/msg00038.html"
            },
            {
              "name": "USN-3997-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3997-1/"
            },
            {
              "name": "openSUSE-SU-2019:1484",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00002.html"
            },
            {
              "name": "RHSA-2019:1310",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:1310"
            },
            {
              "name": "RHSA-2019:1308",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:1308"
            },
            {
              "name": "RHSA-2019:1309",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:1309"
            },
            {
              "name": "openSUSE-SU-2019:1534",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00029.html"
            },
            {
              "name": "openSUSE-SU-2019:1664",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00084.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2019-9797",
    "datePublished": "2019-04-26T16:13:22",
    "dateReserved": "2019-03-14T00:00:00",
    "dateUpdated": "2024-08-04T22:01:54.947Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2019-9816 (GCVE-0-2019-9816)

Vulnerability from cvelistv5

Published

2019-07-23 13:24

Modified

2024-08-04 22:01

Severity ?

CWE

Type confusion with object groups and UnboxedObjects

Summary

A possible vulnerability exists where type confusion can occur when manipulating JavaScript objects in object groups, allowing for the bypassing of security checks within these groups. *Note: this vulnerability has only been demonstrated with UnboxedObjects, which are disabled by default on all supported releases.*. This vulnerability affects Thunderbird < 60.7, Firefox < 67, and Firefox ESR < 60.7.

References

URL

Tags

	https://www.mozilla.org/security/advisories/mfsa2019-13/	x_refsource_MISC
	https://www.mozilla.org/security/advisories/mfsa2019-15/	x_refsource_MISC
	https://www.mozilla.org/security/advisories/mfsa2019-14/	x_refsource_MISC
	https://bugzilla.mozilla.org/show_bug.cgi?id=1536768	x_refsource_MISC

Impacted products

Vendor

Product

Version

Mozilla

Thunderbird

Version: unspecified < 60.7

	Mozilla	Firefox	Version: unspecified < 67
	Mozilla	Firefox ESR	Version: unspecified < 60.7

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T22:01:54.964Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2019-13/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2019-15/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2019-14/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1536768"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "60.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "67",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "60.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A possible vulnerability exists where type confusion can occur when manipulating JavaScript objects in object groups, allowing for the bypassing of security checks within these groups. *Note: this vulnerability has only been demonstrated with UnboxedObjects, which are disabled by default on all supported releases.*. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Type confusion with object groups and UnboxedObjects",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-07-23T13:24:19",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2019-13/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2019-15/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2019-14/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1536768"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@mozilla.org",
          "ID": "CVE-2019-9816",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Thunderbird",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "60.7"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Firefox",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "67"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Firefox ESR",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "60.7"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Mozilla"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A possible vulnerability exists where type confusion can occur when manipulating JavaScript objects in object groups, allowing for the bypassing of security checks within these groups. *Note: this vulnerability has only been demonstrated with UnboxedObjects, which are disabled by default on all supported releases.*. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Type confusion with object groups and UnboxedObjects"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2019-13/",
              "refsource": "MISC",
              "url": "https://www.mozilla.org/security/advisories/mfsa2019-13/"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2019-15/",
              "refsource": "MISC",
              "url": "https://www.mozilla.org/security/advisories/mfsa2019-15/"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2019-14/",
              "refsource": "MISC",
              "url": "https://www.mozilla.org/security/advisories/mfsa2019-14/"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1536768",
              "refsource": "MISC",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1536768"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2019-9816",
    "datePublished": "2019-07-23T13:24:19",
    "dateReserved": "2019-03-14T00:00:00",
    "dateUpdated": "2024-08-04T22:01:54.964Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2019-11691 (GCVE-0-2019-11691)

Vulnerability from cvelistv5

Published

2019-07-23 13:23

Modified

2024-08-04 23:03

Severity ?

CWE

Use-after-free in XMLHttpRequest

Summary

A use-after-free vulnerability can occur when working with XMLHttpRequest (XHR) in an event loop, causing the XHR main thread to be called after it has been freed. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 60.7, Firefox < 67, and Firefox ESR < 60.7.

References

URL

Tags

	https://www.mozilla.org/security/advisories/mfsa2019-13/	x_refsource_MISC
	https://www.mozilla.org/security/advisories/mfsa2019-15/	x_refsource_MISC
	https://www.mozilla.org/security/advisories/mfsa2019-14/	x_refsource_MISC
	https://bugzilla.mozilla.org/show_bug.cgi?id=1542465	x_refsource_MISC

Impacted products

Vendor

Product

Version

Mozilla

Thunderbird

Version: unspecified < 60.7

	Mozilla	Firefox	Version: unspecified < 67
	Mozilla	Firefox ESR	Version: unspecified < 60.7

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T23:03:32.349Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2019-13/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2019-15/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2019-14/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1542465"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "60.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "67",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "60.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A use-after-free vulnerability can occur when working with XMLHttpRequest (XHR) in an event loop, causing the XHR main thread to be called after it has been freed. This results in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Use-after-free in XMLHttpRequest",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-07-23T13:23:12",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2019-13/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2019-15/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2019-14/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1542465"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@mozilla.org",
          "ID": "CVE-2019-11691",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Thunderbird",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "60.7"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Firefox",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "67"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Firefox ESR",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "60.7"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Mozilla"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A use-after-free vulnerability can occur when working with XMLHttpRequest (XHR) in an event loop, causing the XHR main thread to be called after it has been freed. This results in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Use-after-free in XMLHttpRequest"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2019-13/",
              "refsource": "MISC",
              "url": "https://www.mozilla.org/security/advisories/mfsa2019-13/"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2019-15/",
              "refsource": "MISC",
              "url": "https://www.mozilla.org/security/advisories/mfsa2019-15/"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2019-14/",
              "refsource": "MISC",
              "url": "https://www.mozilla.org/security/advisories/mfsa2019-14/"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1542465",
              "refsource": "MISC",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1542465"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2019-11691",
    "datePublished": "2019-07-23T13:23:12",
    "dateReserved": "2019-05-03T00:00:00",
    "dateUpdated": "2024-08-04T23:03:32.349Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2019-9800 (GCVE-0-2019-9800)

Vulnerability from cvelistv5

Published

2019-07-23 13:26

Modified

2024-08-04 22:01

Severity ?

CWE

Memory safety bugs fixed in Firefox 67, Firefox ESR 60.7, and Thunderbird 60.7

Summary

Mozilla developers and community members reported memory safety bugs present in Firefox 66, Firefox ESR 60.6, and Thunderbird 60.6. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Thunderbird < 60.7, Firefox < 67, and Firefox ESR < 60.7.

References

URL

Tags

	https://www.mozilla.org/security/advisories/mfsa2019-13/	x_refsource_MISC
	https://www.mozilla.org/security/advisories/mfsa2019-15/	x_refsource_MISC
	https://www.mozilla.org/security/advisories/mfsa2019-14/	x_refsource_MISC
	https://bugzilla.mozilla.org/buglist.cgi?bug_id=1540166%2C1534593%2C1546327%2C1540136%2C1538736%2C1538042%2C1535612%2C1499719%2C1499108%2C1538619%2C1535194%2C1516325%2C1542324%2C1542097%2C1532465%2C1533554%2C1541580	x_refsource_MISC

Impacted products

Vendor

Product

Version

Mozilla

Thunderbird

Version: unspecified < 60.7

	Mozilla	Firefox	Version: unspecified < 67
	Mozilla	Firefox ESR	Version: unspecified < 60.7

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T22:01:54.891Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2019-13/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2019-15/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2019-14/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1540166%2C1534593%2C1546327%2C1540136%2C1538736%2C1538042%2C1535612%2C1499719%2C1499108%2C1538619%2C1535194%2C1516325%2C1542324%2C1542097%2C1532465%2C1533554%2C1541580"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "60.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "67",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "60.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Mozilla developers and community members reported memory safety bugs present in Firefox 66, Firefox ESR 60.6, and Thunderbird 60.6. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Memory safety bugs fixed in Firefox 67, Firefox ESR 60.7, and Thunderbird 60.7",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-07-23T13:26:14",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2019-13/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2019-15/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2019-14/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1540166%2C1534593%2C1546327%2C1540136%2C1538736%2C1538042%2C1535612%2C1499719%2C1499108%2C1538619%2C1535194%2C1516325%2C1542324%2C1542097%2C1532465%2C1533554%2C1541580"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@mozilla.org",
          "ID": "CVE-2019-9800",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Thunderbird",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "60.7"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Firefox",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "67"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Firefox ESR",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "60.7"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Mozilla"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Mozilla developers and community members reported memory safety bugs present in Firefox 66, Firefox ESR 60.6, and Thunderbird 60.6. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Memory safety bugs fixed in Firefox 67, Firefox ESR 60.7, and Thunderbird 60.7"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2019-13/",
              "refsource": "MISC",
              "url": "https://www.mozilla.org/security/advisories/mfsa2019-13/"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2019-15/",
              "refsource": "MISC",
              "url": "https://www.mozilla.org/security/advisories/mfsa2019-15/"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2019-14/",
              "refsource": "MISC",
              "url": "https://www.mozilla.org/security/advisories/mfsa2019-14/"
            },
            {
              "name": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1540166%2C1534593%2C1546327%2C1540136%2C1538736%2C1538042%2C1535612%2C1499719%2C1499108%2C1538619%2C1535194%2C1516325%2C1542324%2C1542097%2C1532465%2C1533554%2C1541580",
              "refsource": "MISC",
              "url": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1540166%2C1534593%2C1546327%2C1540136%2C1538736%2C1538042%2C1535612%2C1499719%2C1499108%2C1538619%2C1535194%2C1516325%2C1542324%2C1542097%2C1532465%2C1533554%2C1541580"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2019-9800",
    "datePublished": "2019-07-23T13:26:14",
    "dateReserved": "2019-03-14T00:00:00",
    "dateUpdated": "2024-08-04T22:01:54.891Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2018-18511 (GCVE-0-2018-18511)

Vulnerability from cvelistv5

Published

2019-04-26 16:13

Modified

2024-08-05 11:08

Severity ?

CWE

Cross-origin theft of images with ImageBitmapRenderingContext

Summary

Cross-origin images can be read from a canvas element in violation of the same-origin policy using the transferFromImageBitmap method. *Note: This only affects Firefox 65. Previous versions are unaffected.*. This vulnerability affects Firefox < 65.0.1.

References

URL

Tags

	https://www.mozilla.org/security/advisories/mfsa2019-04/	x_refsource_MISC
	https://bugzilla.mozilla.org/show_bug.cgi?id=1526218	x_refsource_MISC
	https://seclists.org/bugtraq/2019/May/56	mailing-list, x_refsource_BUGTRAQ
	https://seclists.org/bugtraq/2019/May/59	mailing-list, x_refsource_BUGTRAQ
	https://www.debian.org/security/2019/dsa-4448	vendor-advisory, x_refsource_DEBIAN
	https://lists.debian.org/debian-lts-announce/2019/05/msg00032.html	mailing-list, x_refsource_MLIST
	https://access.redhat.com/errata/RHSA-2019:1265	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2019:1267	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2019:1269	vendor-advisory, x_refsource_REDHAT
	https://www.debian.org/security/2019/dsa-4451	vendor-advisory, x_refsource_DEBIAN
	https://seclists.org/bugtraq/2019/May/67	mailing-list, x_refsource_BUGTRAQ
	https://lists.debian.org/debian-lts-announce/2019/05/msg00038.html	mailing-list, x_refsource_MLIST
	https://usn.ubuntu.com/3997-1/	vendor-advisory, x_refsource_UBUNTU
	http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00002.html	vendor-advisory, x_refsource_SUSE
	https://access.redhat.com/errata/RHSA-2019:1310	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2019:1308	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2019:1309	vendor-advisory, x_refsource_REDHAT
	http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00029.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00084.html	vendor-advisory, x_refsource_SUSE

Impacted products

	Vendor	Product	Version
	Mozilla	Firefox	Version: unspecified < 65.0.1

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T11:08:21.991Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2019-04/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1526218"
          },
          {
            "name": "20190522 [slackware-security] mozilla-firefox (SSA:2019-141-01)",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "https://seclists.org/bugtraq/2019/May/56"
          },
          {
            "name": "20190523 [SECURITY] [DSA 4448-1] firefox-esr security update",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "https://seclists.org/bugtraq/2019/May/59"
          },
          {
            "name": "DSA-4448",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2019/dsa-4448"
          },
          {
            "name": "[debian-lts-announce] 20190523 [SECURITY] [DLA 1800-1] firefox-esr security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2019/05/msg00032.html"
          },
          {
            "name": "RHSA-2019:1265",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:1265"
          },
          {
            "name": "RHSA-2019:1267",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:1267"
          },
          {
            "name": "RHSA-2019:1269",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:1269"
          },
          {
            "name": "DSA-4451",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2019/dsa-4451"
          },
          {
            "name": "20190527 [SECURITY] [DSA 4451-1] thunderbird security update",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "https://seclists.org/bugtraq/2019/May/67"
          },
          {
            "name": "[debian-lts-announce] 20190527 [SECURITY] [DLA 1806-1] thunderbird security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2019/05/msg00038.html"
          },
          {
            "name": "USN-3997-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3997-1/"
          },
          {
            "name": "openSUSE-SU-2019:1484",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00002.html"
          },
          {
            "name": "RHSA-2019:1310",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:1310"
          },
          {
            "name": "RHSA-2019:1308",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:1308"
          },
          {
            "name": "RHSA-2019:1309",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:1309"
          },
          {
            "name": "openSUSE-SU-2019:1534",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00029.html"
          },
          {
            "name": "openSUSE-SU-2019:1664",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00084.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "65.0.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Cross-origin images can be read from a canvas element in violation of the same-origin policy using the transferFromImageBitmap method. *Note: This only affects Firefox 65. Previous versions are unaffected.*. This vulnerability affects Firefox \u003c 65.0.1."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Cross-origin theft of images with ImageBitmapRenderingContext",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-06-28T14:06:06",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2019-04/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1526218"
        },
        {
          "name": "20190522 [slackware-security] mozilla-firefox (SSA:2019-141-01)",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "https://seclists.org/bugtraq/2019/May/56"
        },
        {
          "name": "20190523 [SECURITY] [DSA 4448-1] firefox-esr security update",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "https://seclists.org/bugtraq/2019/May/59"
        },
        {
          "name": "DSA-4448",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2019/dsa-4448"
        },
        {
          "name": "[debian-lts-announce] 20190523 [SECURITY] [DLA 1800-1] firefox-esr security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2019/05/msg00032.html"
        },
        {
          "name": "RHSA-2019:1265",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:1265"
        },
        {
          "name": "RHSA-2019:1267",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:1267"
        },
        {
          "name": "RHSA-2019:1269",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:1269"
        },
        {
          "name": "DSA-4451",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2019/dsa-4451"
        },
        {
          "name": "20190527 [SECURITY] [DSA 4451-1] thunderbird security update",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "https://seclists.org/bugtraq/2019/May/67"
        },
        {
          "name": "[debian-lts-announce] 20190527 [SECURITY] [DLA 1806-1] thunderbird security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2019/05/msg00038.html"
        },
        {
          "name": "USN-3997-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3997-1/"
        },
        {
          "name": "openSUSE-SU-2019:1484",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00002.html"
        },
        {
          "name": "RHSA-2019:1310",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:1310"
        },
        {
          "name": "RHSA-2019:1308",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:1308"
        },
        {
          "name": "RHSA-2019:1309",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:1309"
        },
        {
          "name": "openSUSE-SU-2019:1534",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00029.html"
        },
        {
          "name": "openSUSE-SU-2019:1664",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00084.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@mozilla.org",
          "ID": "CVE-2018-18511",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Firefox",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "65.0.1"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Mozilla"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Cross-origin images can be read from a canvas element in violation of the same-origin policy using the transferFromImageBitmap method. *Note: This only affects Firefox 65. Previous versions are unaffected.*. This vulnerability affects Firefox \u003c 65.0.1."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Cross-origin theft of images with ImageBitmapRenderingContext"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2019-04/",
              "refsource": "MISC",
              "url": "https://www.mozilla.org/security/advisories/mfsa2019-04/"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1526218",
              "refsource": "MISC",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1526218"
            },
            {
              "name": "20190522 [slackware-security] mozilla-firefox (SSA:2019-141-01)",
              "refsource": "BUGTRAQ",
              "url": "https://seclists.org/bugtraq/2019/May/56"
            },
            {
              "name": "20190523 [SECURITY] [DSA 4448-1] firefox-esr security update",
              "refsource": "BUGTRAQ",
              "url": "https://seclists.org/bugtraq/2019/May/59"
            },
            {
              "name": "DSA-4448",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2019/dsa-4448"
            },
            {
              "name": "[debian-lts-announce] 20190523 [SECURITY] [DLA 1800-1] firefox-esr security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2019/05/msg00032.html"
            },
            {
              "name": "RHSA-2019:1265",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:1265"
            },
            {
              "name": "RHSA-2019:1267",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:1267"
            },
            {
              "name": "RHSA-2019:1269",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:1269"
            },
            {
              "name": "DSA-4451",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2019/dsa-4451"
            },
            {
              "name": "20190527 [SECURITY] [DSA 4451-1] thunderbird security update",
              "refsource": "BUGTRAQ",
              "url": "https://seclists.org/bugtraq/2019/May/67"
            },
            {
              "name": "[debian-lts-announce] 20190527 [SECURITY] [DLA 1806-1] thunderbird security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2019/05/msg00038.html"
            },
            {
              "name": "USN-3997-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3997-1/"
            },
            {
              "name": "openSUSE-SU-2019:1484",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00002.html"
            },
            {
              "name": "RHSA-2019:1310",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:1310"
            },
            {
              "name": "RHSA-2019:1308",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:1308"
            },
            {
              "name": "RHSA-2019:1309",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:1309"
            },
            {
              "name": "openSUSE-SU-2019:1534",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00029.html"
            },
            {
              "name": "openSUSE-SU-2019:1664",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00084.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2018-18511",
    "datePublished": "2019-04-26T16:13:22",
    "dateReserved": "2018-10-19T00:00:00",
    "dateUpdated": "2024-08-05T11:08:21.991Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2019-11698 (GCVE-0-2019-11698)

Vulnerability from cvelistv5

Published

2019-07-23 13:21

Modified

2024-08-04 23:03

Severity ?

CWE

Theft of user history data through drag and drop of hyperlinks to and from bookmarks

Summary

If a crafted hyperlink is dragged and dropped to the bookmark bar or sidebar and the resulting bookmark is subsequently dragged and dropped into the web content area, an arbitrary query of a user's browser history can be run and transmitted to the content page via drop event data. This allows for the theft of browser history by a malicious site. This vulnerability affects Thunderbird < 60.7, Firefox < 67, and Firefox ESR < 60.7.

References

URL

Tags

	https://www.mozilla.org/security/advisories/mfsa2019-13/	x_refsource_MISC
	https://www.mozilla.org/security/advisories/mfsa2019-15/	x_refsource_MISC
	https://www.mozilla.org/security/advisories/mfsa2019-14/	x_refsource_MISC
	https://bugzilla.mozilla.org/show_bug.cgi?id=1543191	x_refsource_MISC

Impacted products

Vendor

Product

Version

Mozilla

Thunderbird

Version: unspecified < 60.7

	Mozilla	Firefox	Version: unspecified < 67
	Mozilla	Firefox ESR	Version: unspecified < 60.7

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T23:03:32.445Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2019-13/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2019-15/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2019-14/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1543191"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "60.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "67",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "60.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "If a crafted hyperlink is dragged and dropped to the bookmark bar or sidebar and the resulting bookmark is subsequently dragged and dropped into the web content area, an arbitrary query of a user\u0027s browser history can be run and transmitted to the content page via drop event data. This allows for the theft of browser history by a malicious site. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Theft of user history data through drag and drop of hyperlinks to and from bookmarks",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-07-23T13:21:58",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2019-13/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2019-15/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2019-14/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1543191"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@mozilla.org",
          "ID": "CVE-2019-11698",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Thunderbird",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "60.7"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Firefox",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "67"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Firefox ESR",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "60.7"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Mozilla"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "If a crafted hyperlink is dragged and dropped to the bookmark bar or sidebar and the resulting bookmark is subsequently dragged and dropped into the web content area, an arbitrary query of a user\u0027s browser history can be run and transmitted to the content page via drop event data. This allows for the theft of browser history by a malicious site. This vulnerability affects Thunderbird \u003c 60.7, Firefox \u003c 67, and Firefox ESR \u003c 60.7."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Theft of user history data through drag and drop of hyperlinks to and from bookmarks"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2019-13/",
              "refsource": "MISC",
              "url": "https://www.mozilla.org/security/advisories/mfsa2019-13/"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2019-15/",
              "refsource": "MISC",
              "url": "https://www.mozilla.org/security/advisories/mfsa2019-15/"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2019-14/",
              "refsource": "MISC",
              "url": "https://www.mozilla.org/security/advisories/mfsa2019-14/"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1543191",
              "refsource": "MISC",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1543191"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2019-11698",
    "datePublished": "2019-07-23T13:21:58",
    "dateReserved": "2019-05-03T00:00:00",
    "dateUpdated": "2024-08-04T23:03:32.445Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Tags

Taxonomy of the tags.

All sightings related to this event Export sightings related to this event

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

rhsa-2019:1267

Vulnerability from csaf_redhat

CVE-2019-9820 (GCVE-0-2019-9820)

Vulnerability from cvelistv5

CVE-2019-5798 (GCVE-0-2019-5798)

Vulnerability from cvelistv5

CVE-2019-11692 (GCVE-0-2019-11692)

Vulnerability from cvelistv5

CVE-2019-11693 (GCVE-0-2019-11693)

Vulnerability from cvelistv5

CVE-2019-9817 (GCVE-0-2019-9817)

Vulnerability from cvelistv5

CVE-2019-7317 (GCVE-0-2019-7317)

Vulnerability from cvelistv5

CVE-2019-9819 (GCVE-0-2019-9819)

Vulnerability from cvelistv5

CVE-2019-9797 (GCVE-0-2019-9797)

Vulnerability from cvelistv5

CVE-2019-9816 (GCVE-0-2019-9816)

Vulnerability from cvelistv5

CVE-2019-11691 (GCVE-0-2019-11691)

Vulnerability from cvelistv5

CVE-2019-9800 (GCVE-0-2019-9800)

Vulnerability from cvelistv5

CVE-2018-18511 (GCVE-0-2018-18511)

Vulnerability from cvelistv5

CVE-2019-11698 (GCVE-0-2019-11698)

Vulnerability from cvelistv5

Tags

Sightings

Nomenclature