Log in Start free

Actively exploited · Published Jul 23, 2019 · Assigned by mozilla

CVE-2019-11707

High 8.8 Exploited

In plain English

A high-severity type confusion in Firefox from Mozilla. Attackers are actively exploiting it in the wild (listed by CISA on May 23, 2022). The chance it is exploited in the next 30 days is estimated at 38.0% (higher than 99% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code. Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)8.8High
Exploit odds (30 days)38.0%top 1.4% of all CVEs
Exploited in the wildYesCISA KEV since May 23, 2022
Attack tooling1Public PoC

CISA guidance

Apply updates per vendor instructions.

Federal agencies must remediate by Jun 13, 2022.

Official description

A type confusion vulnerability can occur when manipulating JavaScript objects due to issues in Array.pop. This can allow for an exploitable crash. We are aware of targeted attacks in the wild abusing this flaw. This vulnerability affects Firefox ESR < 60.7.1, Firefox < 67.0.3, and Thunderbird < 60.7.2.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Alpine:v3.20firefox-esr60.7.1-r0ALPINE-CVE-2019-11707
Alpine:v3.21firefox-esr60.7.1-r0ALPINE-CVE-2019-11707
Alpine:v3.22firefox-esr60.7.1-r0ALPINE-CVE-2019-11707
Alpine:v3.23firefox-esr60.7.1-r0ALPINE-CVE-2019-11707
Debian:12firefox-esr60.7.1esr-1DEBIAN-CVE-2019-11707
Debian:13firefox-esr60.7.1esr-1DEBIAN-CVE-2019-11707
Debian:14firefox-esr60.7.1esr-1DEBIAN-CVE-2019-11707
Debian:12thunderbird1:60.7.2-1DEBIAN-CVE-2019-11707
Debian:13thunderbird1:60.7.2-1DEBIAN-CVE-2019-11707
Debian:14thunderbird1:60.7.2-1DEBIAN-CVE-2019-11707

Affected products (as reported)

VendorProductVersions
Mozilla Firefox ESR unspecified – before 60.7.1
Mozilla Firefox unspecified – before 67.0.3
Mozilla Thunderbird unspecified – before 60.7.2

Weakness: CWE-843 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

References