NetSight
IP …
high8.8

CVE-2019-17017

Due to a missing case handling object types, a type confusion vulnerability could occur, resulting in a crash.

Impact

Due to a missing case handling object types, a type confusion vulnerability could occur, resulting in a crash. We presume that with enough effort that it could be exploited to run arbitrary code. This vulnerability affects Firefox ESR < 68.4 and Firefox < 72.

Affected products

VendorProductAffected versions
MozillaFirefox
before 72.0
MozillaFirefox Esr
before 68.4
CanonicalUbuntu Linux
Versions 16.04, 18.04, 19.04, 19.10
DebianDebian Linux
Versions 8.0, 9.0, 10.0
RedhatEnterprise Linux Desktop
Versions 6.0, 7.0
RedhatEnterprise Linux Server
Versions 6.0, 7.0
RedhatEnterprise Linux Server Aus
Version 7.7
RedhatEnterprise Linux Server Tus
Version 7.7
RedhatEnterprise Linux Workstation
Versions 6.0, 7.0

Weakness classification

CWE-843

References