Lucene search
Veracode Vulnerability DatabaseVERACODE:20323HistoryMay 27, 2019 - 12:39 a.m.
Denial Of Service (DoS)
2019-05-2700:39:14
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
15
denial of service
buffer overflow
webgl
graphics drivers
malicious content
exploitable crash
software
EPSS
0.003
Percentile
69.1%
firefox/thunderbird is vulnerable to denial of service. The bufferdata function in WebGL is vulnerable to a buffer overflow with specific graphics drivers on Linux. This could result in malicious content freezing a tab or triggering a potentially exploitable crash.
Affected configurations
Node
firefoxMatch38.6.1_1.el6_7
ORfirefoxMatch3.6.17_1.el6_0
ORfirefoxMatch31.5.0_1.el6_6
ORfirefoxMatch24.4.0_1.el6_5
ORfirefoxMatch10.0.5_1.el6_2
ORfirefoxMatch38.7.0_1.el6_7
ORfirefoxMatch10.0.8_1.el6_3
ORfirefoxMatch3.6.14_4.el6_0
ORfirefoxMatch17.0.10_1.el6_4
ORfirefoxMatch38.1.1_1.el6_7
ORfirefoxMatch31.4.0_1.el6_6
ORfirefoxMatch10.0.4_1.el6_2
ORfirefoxMatch24.6.0_1.el6_5
ORfirefoxMatch60.4.0_1.el6.centos
ORfirefoxMatch60.6.1_1.el6.centos
ORfirefoxMatch17.0.9_1.el6_4
ORfirefoxMatch3.6.18_1.el6_1
ORfirefoxMatch38.6.0_1.el6_7
ORfirefoxMatch10.0.3_1.el6_2
ORfirefoxMatch3.6.26_1.el6_2
ORfirefoxMatch38.6.0_2.el6_7
ORfirefoxMatch45.1.1_1.el6_8
ORfirefoxMatch60.2.0_1.el7.centos
ORfirefoxMatch60.3.0_1.el6.centos
ORfirefoxMatch24.7.0_1.el6_5
ORfirefoxMatch31.2.0_3.el6_6
ORfirefoxMatch45.8.0_2.el6_8
ORfirefoxMatch45.1.0_1.el6_7
ORfirefoxMatch60.5.1_1.el7.centos
ORfirefoxMatch10.0.1_1.el6_2
ORfirefoxMatch17.0.5_1.el6_4
ORfirefoxMatch60.3.0_1.el6
ORfirefoxMatch45.0.1_1.el6
ORfirefoxMatch60.6.0_3.el7.centos
ORfirefoxMatch17.0.6_1.el6_4
ORfirefoxMatch10.0.7_1.el6_3
ORfirefoxMatch52.5.0_1.el6_9
ORfirefoxMatch17.0.3_1.el6_3
ORfirefoxMatch60.2.1_1.el7.centos
ORfirefoxMatch60.1.0_5.el6
ORfirefoxMatch52.6.0_1.el6_9
ORfirefoxMatch60.1.0_6.el6
ORfirefoxMatch52.8.0_1.el7.centos
ORfirefoxMatch3.6.22_1.el6_1
ORfirefoxMatch3.6.24_3.el6_1
ORfirefoxMatch38.1.0_1.el6_6
ORfirefoxMatch60.2.2_1.el6.centos
ORfirefoxMatch10.0.6_1.el6_3
ORfirefoxMatch52.1.0_2.el6_9
ORfirefoxMatch31.1.0_5.el6_5
ORfirefoxMatch17.0.8_1.el6_4
ORfirefoxMatch60.6.1_1.el7.centos
ORfirefoxMatch3.6.9_2.el6
ORfirefoxMatch60.5.1_1.el6.centos
ORfirefoxMatch38.2.0_4.el6_7
ORfirefoxMatch31.3.0_3.el6_6
ORfirefoxMatch45.7.0_1.el6_8
ORfirefoxMatch45.3.0_1.el6_8
ORfirefoxMatch60.5.0_2.el6.centos
ORfirefoxMatch24.3.0_2.el6_5
ORfirefoxMatch3.6.12_1.el6_0
ORfirefoxMatch10.0.11_1.el6_3
ORfirefoxMatch60.4.0_1.el6.centos.0.1
ORfirefoxMatch45.1.1_1.el6_7
ORfirefoxMatch45.5.0_1.el6_8
ORfirefoxMatch45.5.1_1.el6_8
ORfirefoxMatch31.6.0_2.el6_6
ORfirefoxMatch38.0_4.el6_6
ORfirefoxMatch45.7.0_2.el6_8
ORfirefoxMatch52.2.0_1.el6_9
ORfirefoxMatch60.2.1_1.el6.centos
ORfirefoxMatch60.6.0_3.el6.centos
ORfirefoxMatch45.2.0_1.el6_8
ORfirefoxMatch38.5.0_2.el6_7
ORfirefoxMatch24.2.0_1.el6_5
ORfirefoxMatch38.3.0_2.el6_7
ORfirefoxMatch60.1.0_6.el6.centos
ORfirefoxMatch60.4.0_1.el7.centos.0.1
ORfirefoxMatch52.7.0_1.el7.centos
ORfirefoxMatch60.2.0_1.el6.centos
ORfirefoxMatch52.7.3_1.el6_9
ORfirefoxMatch31.5.3_1.el6_6
ORfirefoxMatch38.2.1_1.el6_7
ORfirefoxMatch52.7.0_1.el6_9
ORfirefoxMatch52.8.0_1.el6_9
ORfirefoxMatch10.0.12_1.el6_3
ORfirefoxMatch45.6.0_1.el6_8
ORfirefoxMatch52.4.0_1.el6_9
ORfirefoxMatch3.6.23_2.el6_1
ORfirefoxMatch24.2.0_6.el6_5
ORfirefoxMatch52.8.0_1.el6.centos
ORfirefoxMatch60.3.0_1.el7.centos
ORfirefoxMatch3.6.15_2.el6_0
ORfirefoxMatch3.6.20_2.el6_1
ORfirefoxMatch60.1.0_5.el6.centos
ORfirefoxMatch45.4.0_1.el6_8
ORfirefoxMatch60.1.0_4.el7.centos
ORfirefoxMatch60.2.1_1.el6
ORfirefoxMatch17.0.7_1.el6_4
ORfirefoxMatch60.2.2_1.el6
ORfirefoxMatch52.7.2_1.el6_9
ORfirefoxMatch3.6.13_2.el6_0
ORfirefoxMatch38.0.1_1.el6_6
ORfirefoxMatch52.3.0_3.el6_9
ORfirefoxMatch60.5.0_2.el7.centos
ORfirefoxMatch52.7.3_1.el7.centos
ORfirefoxMatch10.0.10_1.el6_3
ORfirefoxMatch60.2.2_1.el7.centos
ORfirefoxMatch60.2.0_1.el6
ORfirefoxMatch24.8.0_1.el6_5
ORfirefoxMatch38.4.0_1.el6_7
ORfirefoxMatch60.4.0_1.el7.centos
ORfirefoxMatch24.5.0_1.el6_5
ORfirefoxMatch52.5.1_1.el6_9
OR-thunderbirdMatch31.5.0_1.el6_6
OR-thunderbirdMatch24.4.0_1.el6_5
OR-thunderbirdMatch38.7.0_1.el6_7
OR-thunderbirdMatch10.0.8_1.el6_3
OR-thunderbirdMatch17.0.10_1.el6_4
OR-thunderbirdMatch17.0.6_2.el6_4
OR-thunderbirdMatch3.1.10_1.el6_0
OR-thunderbirdMatch3.1.14_1.el6_1
OR-thunderbirdMatch3.1.7_3.el6_0
OR-thunderbirdMatch31.4.0_1.el6_6
OR-thunderbirdMatch10.0.4_1.el6_2
OR-thunderbirdMatch10.0.12_3.el6_3
OR-thunderbirdMatch24.6.0_1.el6_5
OR-thunderbirdMatch60.4.0_1.el6.centos
OR-thunderbirdMatch52.8.0_2.el6.centos
OR-thunderbirdMatch17.0.9_1.el6_4
OR-thunderbirdMatch60.6.1_1.el6.centos
OR-thunderbirdMatch38.6.0_1.el6_7
OR-thunderbirdMatch10.0.3_1.el6_2
OR-thunderbirdMatch45.8.0_1.el6_8
OR-thunderbirdMatch60.3.0_1.el6.centos
OR-thunderbirdMatch24.7.0_1.el6_5
OR-thunderbirdMatch31.2.0_3.el6_6
OR-thunderbirdMatch52.9.1_1.el7.centos
OR-thunderbirdMatch3.1.12_1.el6_1
OR-thunderbirdMatch17.0.5_1.el6_4
OR-thunderbirdMatch38.8.0_2.el6_8
OR-thunderbirdMatch10.0.5_2.el6_2
OR-thunderbirdMatch10.0.7_1.el6_3
OR-thunderbirdMatch52.5.0_1.el6_9
OR-thunderbirdMatch52.4.0_2.el6_9
OR-thunderbirdMatch17.0.3_1.el6_3
OR-thunderbirdMatch31.3.0_1.el6_6
OR-thunderbirdMatch52.5.2_1.el6_9
OR-thunderbirdMatch60.2.1_5.el6
OR-thunderbirdMatch52.6.0_1.el6_9
OR-thunderbirdMatch52.8.0_1.el7.centos
OR-thunderbirdMatch31.6.0_1.el6_6
OR-thunderbirdMatch3.1.8_4.el6_0
OR-thunderbirdMatch45.2_1.el6_8
OR-thunderbirdMatch10.0.6_1.el6_3
OR-thunderbirdMatch60.6.1_1.el7.centos
OR-thunderbirdMatch3.1.11_2.el6_1
OR-thunderbirdMatch38.2.0_4.el6_7
OR-thunderbirdMatch45.7.0_1.el6_8
OR-thunderbirdMatch52.8.0_2.el6_9
OR-thunderbirdMatch45.3.0_1.el6_8
OR-thunderbirdMatch24.3.0_2.el6_5
OR-thunderbirdMatch38.3.0_1.el6_7
OR-thunderbirdMatch52.1.0_1.el6_9
OR-thunderbirdMatch52.9.1_1.el6.centos
OR-thunderbirdMatch10.0.11_1.el6_3
OR-thunderbirdMatch45.5.1_1.el6_8
OR-thunderbirdMatch45.5.0_1.el6_8
OR-thunderbirdMatch17.0.8_5.el6_4
OR-thunderbirdMatch52.2.0_1.el6_9
OR-thunderbirdMatch38.5.0_1.el6_7
OR-thunderbirdMatch24.2.0_1.el6_5
OR-thunderbirdMatch3.1.15_1.el6_1
OR-thunderbirdMatch52.9.1_1.el6
OR-thunderbirdMatch52.7.0_1.el6_9
OR-thunderbirdMatch3.1.12_2.el6_1
OR-thunderbirdMatch3.1.16_2.el6_1
OR-thunderbirdMatch10.0.8_2.el6_3
OR-thunderbirdMatch45.6.0_1.el6_8
OR-thunderbirdMatch3.1.3_1.el6
OR-thunderbirdMatch31.7.0_1.el6_6
OR-thunderbirdMatch60.3.0_1.el7.centos
OR-thunderbirdMatch3.1.6_1.el6_0
OR-thunderbirdMatch60.5.0_1.el7.centos
OR-thunderbirdMatch3.1.18_1.el6_2
OR-thunderbirdMatch52.3.0_1.el6_9
OR-thunderbirdMatch45.4.0_1.el6_8
OR-thunderbirdMatch60.2.1_5.el6.centos
OR-thunderbirdMatch3.1.9_3.el6_0
OR-thunderbirdMatch10.0.1_3.el6_2
OR-thunderbirdMatch31.8.0_1.el6_6
OR-thunderbirdMatch17.0.7_1.el6_4
OR-thunderbirdMatch3.1.18_2.el6_2
OR-thunderbirdMatch10.0.10_1.el6_3
OR-thunderbirdMatch17.0.3_2.el6_4
OR-thunderbirdMatch60.5.0_1.el6.centos
OR-thunderbirdMatch24.8.0_1.el6_5
OR-thunderbirdMatch38.4.0_1.el6_7
OR-thunderbirdMatch60.4.0_1.el7.centos
OR-thunderbirdMatch24.5.0_1.el6_5
OR-thunderbird\Matchstretch1\52.9.1-1~deb9u1
| Vendor | Product | Version | CPE |
|---|---|---|---|
| * | firefox | 38.6.1_1.el6_7 | cpe:2.3:a:*:firefox:38.6.1_1.el6_7:*:*:*:*:*:*:* |
| * | firefox | 3.6.17_1.el6_0 | cpe:2.3:a:*:firefox:3.6.17_1.el6_0:*:*:*:*:*:*:* |
| * | firefox | 31.5.0_1.el6_6 | cpe:2.3:a:*:firefox:31.5.0_1.el6_6:*:*:*:*:*:*:* |
| * | firefox | 24.4.0_1.el6_5 | cpe:2.3:a:*:firefox:24.4.0_1.el6_5:*:*:*:*:*:*:* |
| * | firefox | 10.0.5_1.el6_2 | cpe:2.3:a:*:firefox:10.0.5_1.el6_2:*:*:*:*:*:*:* |
| * | firefox | 38.7.0_1.el6_7 | cpe:2.3:a:*:firefox:38.7.0_1.el6_7:*:*:*:*:*:*:* |
| * | firefox | 10.0.8_1.el6_3 | cpe:2.3:a:*:firefox:10.0.8_1.el6_3:*:*:*:*:*:*:* |
| * | firefox | 3.6.14_4.el6_0 | cpe:2.3:a:*:firefox:3.6.14_4.el6_0:*:*:*:*:*:*:* |
| * | firefox | 17.0.10_1.el6_4 | cpe:2.3:a:*:firefox:17.0.10_1.el6_4:*:*:*:*:*:*:* |
| * | firefox | 38.1.1_1.el6_7 | cpe:2.3:a:*:firefox:38.1.1_1.el6_7:*:*:*:*:*:*:* |
References
access.redhat.com/errata/RHSA-2019:1267
access.redhat.com/security/updates/classification/#critical
bugzilla.mozilla.org/show_bug.cgi?id=1532525
www.mozilla.org/en-US/security/advisories/mfsa2019-14/
www.mozilla.org/security/advisories/mfsa2019-13/
www.mozilla.org/security/advisories/mfsa2019-14/
www.mozilla.org/security/advisories/mfsa2019-15/
Related
nvd
nvd
CVE-2019-11693
2019-07-23 14:15:14
alpinelinux
alpinelinux
CVE-2019-11693
2019-07-23 14:15:14
redhatcve
redhatcve
CVE-2019-11693
2020-01-05 15:49:58
cve
cve
CVE-2019-11693
2019-07-23 14:15:14
ubuntucve
ubuntucve
CVE-2019-11693
2019-05-21 00:00:00
prion
prion
Buffer overflow
2019-07-23 14:15:00
debiancve
debiancve
CVE-2019-11693
2019-07-23 14:15:14
cvelist
cvelist
CVE-2019-11693
2019-07-23 13:22:53
ibm
ibm
nessus
nessus
Scientific Linux Security Update : thunderbird on SL7.x x86_64 (20190604)
2019-06-05 00:00:00
Oracle Linux 6 : thunderbird (ELSA-2019-1310)
2019-06-04 00:00:00
redhat
redhat
(RHSA-2019:1308) Important: thunderbird security update
2019-06-03 20:24:05
(RHSA-2019:1310) Important: thunderbird security update
2019-06-03 20:24:28
(RHSA-2019:1309) Important: thunderbird security update
2019-06-03 20:24:17
oraclelinux
oraclelinux
thunderbird security update
2019-06-03 00:00:00
thunderbird security update
2019-07-30 00:00:00
thunderbird security update
2019-06-03 00:00:00
centos
centos
thunderbird security update
2019-06-10 22:49:17
firefox security update
2019-05-29 19:47:30
thunderbird security update
2019-06-10 22:30:16
amazon
amazon
Critical: thunderbird
2019-06-11 23:24:00
archlinux
archlinux
[ASA-201905-8] thunderbird: multiple issues
2019-05-23 00:00:00
[ASA-201905-9] firefox: multiple issues
2019-05-23 00:00:00
osv
osv
Red Hat Security Advisory: thunderbird security update
2024-09-16 02:34:45
Red Hat Security Advisory: thunderbird security update
2024-09-16 02:34:58
Red Hat Security Advisory: thunderbird security update
2024-09-16 02:34:51
openvas
openvas
CentOS Update for thunderbird CESA-2019:1310 centos6
2019-06-11 00:00:00
Debian: Security Advisory (DLA-1806-1)
2019-05-28 00:00:00
CentOS Update for thunderbird CESA-2019:1309 centos7
2019-06-11 00:00:00
debian
debian
[SECURITY] [DLA 1800-1] firefox-esr security update
2019-05-23 09:40:35
[SECURITY] [DLA 1806-1] thunderbird security update
2019-05-27 08:46:54
[SECURITY] [DSA 4451-1] thunderbird security update
2019-05-24 21:01:55
mageia
mageia
Updated thunderbird packages fix security vulnerabilities
2019-06-10 22:17:03
Updated firefox packages fix security vulnerabilities
2019-06-10 22:17:03
ubuntu
ubuntu
Thunderbird vulnerabilities
2019-05-28 00:00:00
Firefox vulnerabilities
2019-05-21 00:00:00
Firefox regression
2019-06-06 00:00:00
kaspersky
kaspersky
KLA11488 Multiple vulnerabilities in Mozilla Thunderbird
2019-05-21 00:00:00
KLA11487 Multiple vulnerabilities in Mozilla Firefox ESR
2019-05-21 00:00:00
KLA11486 Multiple vulnerabilities in Mozilla Firefox
2019-05-21 00:00:00
slackware
slackware
[slackware-security] mozilla-firefox
2019-05-21 23:35:28
mozilla
mozilla
Security vulnerabilities fixed in Thunderbird 60.7 — Mozilla
2019-05-21 00:00:00
Security vulnerabilities fixed in Firefox ESR 60.7 — Mozilla
2019-05-21 00:00:00
Security vulnerabilities fixed in Firefox 67 — Mozilla
2019-05-21 00:00:00
suse
suse
Security update for MozillaThunderbird (important)
2019-06-02 00:00:00
Security update for MozillaFirefox (important)
2019-06-10 00:00:00
Security update for MozillaThunderbird (important)
2019-06-28 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 10 package thunderbird version 60.7.0-alt1
2019-05-20 00:00:00
Security fix for the ALT Linux 10 package firefox-esr version 60.7.0-alt1
2019-05-21 00:00:00
freebsd
freebsd
mozilla -- multiple vulnerabilities
2019-05-21 00:00:00