CVE-2019-9818
A race condition is present in the crash generation server used to generate data for the crash reporter.
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (0.95%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
A race condition is present in the crash generation server used to generate data for the crash reporter. This issue can lead to a use-after-free in the main process, resulting in a potentially exploitable crash and a sandbox escape. *Note: this vulnerability only affects Windows. Other operating systems are unaffected.*. This vulnerability affects Thunderbird < 60.7, Firefox < 67, and Firefox ESR < 60.7.
- CVSS 3.1
- 8.3 HIGHCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
- EPSS
- 0.95% probability · 59th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-362, CWE-416
- Affected
- mozilla/firefox · mozilla/firefox esr · mozilla/thunderbird
- Source
- security@mozilla.org
References
- https://bugzilla.mozilla.org/show_bug.cgi?id=1542581Issue Tracking, Permissions Required
- https://www.mozilla.org/security/advisories/mfsa2019-13/Vendor Advisory
- https://www.mozilla.org/security/advisories/mfsa2019-14/Vendor Advisory
- https://www.mozilla.org/security/advisories/mfsa2019-15/Vendor Advisory
- https://bugzilla.mozilla.org/show_bug.cgi?id=1542581Issue Tracking, Permissions Required
- https://www.mozilla.org/security/advisories/mfsa2019-13/Vendor Advisory
- https://www.mozilla.org/security/advisories/mfsa2019-14/Vendor Advisory
- https://www.mozilla.org/security/advisories/mfsa2019-15/Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.