CVE-2019-11693

Description

The bufferdata function in WebGL is vulnerable to a buffer overflow with specific graphics drivers on Linux. This could result in malicious content freezing a tab or triggering a potentially exploitable crash. *Note: this issue only occurs on Linux. Other operating systems are unaffected.*. This vulnerability affects Thunderbird < 60.7, Firefox < 67, and Firefox ESR < 60.7.

CVSS Metrics

• v3.0•CRITICAL•Score: 9.8CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
• v2.0•HIGH•Score: 7.5AV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS Trends

Current EPSS score: 0.86%• Percentile: 75%

Techniques & Countermeasures

• CWE-787•Out-of-bounds Write

  The product writes data past the end, or before the beginning, of the intended buffer.

Affected Systems

• mozilla•firefox

  < 60.7.0 | < 67.0 | ≥ unspecified, < 67

• mozilla•firefox_esr

  ≥ unspecified, < 60.7

• mozilla•thunderbird

  < 60.7.0 | ≥ unspecified, < 60.7

References (4)

• https://www.mozilla.org/security/advisories/mfsa2019-13/
• https://www.mozilla.org/security/advisories/mfsa2019-15/
• https://www.mozilla.org/security/advisories/mfsa2019-14/
• https://bugzilla.mozilla.org/show_bug.cgi?id=1532525