Description
Mozilla Firefox and Thunderbird contain a type confusion vulnerability that can occur when manipulating JavaScript objects due to issues in Array.pop, allowing for an exploitable crash.
Full record on cve.org →Affected packages
| Package | Vendor / Product | Version range | Status |
|---|---|---|---|
| Firefox | Mozilla / Firefox | >= unspecified, < 67.0.3 | affected |
| Firefox ESR | Mozilla / Firefox ESR | >= unspecified, < 60.7.1 | affected |
| Thunderbird | Mozilla / Thunderbird | >= unspecified, < 60.7.2 | affected |