CVE-2019-9792

Advisory lineage Upstream: 0 Downstream: 25
Modified
Published: 26 Apr 2019, 16:13
Last modified:04 Aug 2024, 22:01

Vulnerability Summary

Overall Risk (default)
high
70/100
CVSS Score
9.8 CRITICAL
v3.1 (nvd)
EPSS Score
18.87% MEDIUM
19% probability -0.86%
KEV
Not listed
Ransomware
No reports
Public exploits
3 found
Dark Web
Not detected

Timeline

26 Apr 2019, 16:13
Published
Vulnerability first disclosed
04 Aug 2024, 22:01
Last Modified
Vulnerability information updated

Description

The IonMonkey just-in-time (JIT) compiler can leak an internal JS_OPTIMIZED_OUT magic value to the running script during a bailout. This magic value can then be used by JavaScript to achieve memory corruption, which results in a potentially exploitable crash. This vulnerability affects Thunderbird < 60.6, Firefox ESR < 60.6, and Firefox < 66.

CVSS Metrics

  • v3.1•CRITICAL•Score: 9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
  • v2.0•HIGH•Score: 7.5AV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS Trends

Current EPSS score: 18.87%• Percentile: 95%

Techniques & Countermeasures

  • CWE-787•Out-of-bounds Write

    The product writes data past the end, or before the beginning, of the intended buffer.

Affected Systems

  • Unknown•Firefox

    < 60.6.0 | < 66.0 | ≥ unspecified, < 66

  • mozilla•firefox_esr

    ≥ unspecified, < 60.6

  • mozilla•thunderbird

    < 60.6.0 | ≥ unspecified, < 60.6

  • redhat•enterprise_linux

    8.0

  • redhat•enterprise_linux_eus

    8.1 | 8.2 | 8.4

  • redhat•enterprise_linux_server_aus

    8.2 | 8.4

  • redhat•enterprise_linux_server_tus

    8.2 | 8.4

References (7)