CVE-2019-11750

CVSS v3.1 6.5 (Medium)

CVSS v2.0 4.3 (Medium)

EPSS 0.20 % (59^th)

Affected Products 2

Advisories 11

A type confusion vulnerability exists in Spidermonkey, which results in a non-exploitable crash. This vulnerability affects Firefox < 69 and Firefox ESR < 68.1.

Weaknesses

CWE-843: Access of Resource Using Incompatible Type ('Type Confusion')
CWE-908: Use of Uninitialized Resource

CVE Status: PUBLISHED
CNA: Mozilla Corporation
Published Date: 2019-09-27 18:15:13
(5 years ago)
Updated Date: 2020-08-24 17:37:01
(4 years ago)

Affected Products

Mozilla

Firefox
Firefox Esr

Configuration #1

		CPE23	From	Up To
	Mozilla Firefox prior 69.0 version	cpe:2.3:a:mozilla:firefox		< 69.0
	Mozilla Firefox Esr prior 68.1.0 version	cpe:2.3:a:mozilla:firefox_esr		< 68.1.0