QwikSec

Security Database

CVE

CWE

Training

CVE-2019-11707

Published: Jul 23, 2019

Modified: Oct 21, 2025

PUBLISHED

Description

A type confusion vulnerability can occur when manipulating JavaScript objects due to issues in Array.pop. This can allow for an exploitable crash. We are aware of targeted attacks in the wild abusing this flaw. This vulnerability affects Firefox ESR < 60.7.1, Firefox < 67.0.3, and Thunderbird < 60.7.2.

Vendor	Product	Versions
Mozilla	Firefox ESR	affected `unspecified - < 60.7.1`
Mozilla	Firefox	affected `unspecified - < 67.0.3`
Mozilla	Thunderbird	affected `unspecified - < 60.7.2`

References

https://www.mozilla.org/security/advisories/mfsa2019-20/

x_refsource_MISC

https://www.mozilla.org/security/advisories/mfsa2019-18/

x_refsource_MISC

https://bugzilla.mozilla.org/show_bug.cgi?id=1544386

x_refsource_MISC

vendor-advisory

x_refsource_GENTOO

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.