Security Advisory

CVE-2019-11759

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2020-01-08 19:48:07
Last updated 2024-08-04 23:03:32
Assigner mozilla
State PUBLISHED

Description

An attacker could have caused 4 bytes of HMAC output to be written past the end of a buffer stored on the stack. This could be used by an attacker to execute arbitrary code or more likely lead to a crash. This vulnerability affects Firefox < 70, Thunderbird < 68.2, and Firefox ESR < 68.2.