PT-2019-1683 · Mozilla+5 · Firefox+7

Amat Cama + 1 · Published 2019-03-22 · Updated 2025-09-29 · CVE-2019-9810

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 66.0.1 Firefox ESR versions prior to 60.6.1 Thunderbird versions prior to 60.6.1

Description The issue is related to incorrect alias information in the IonMonkey JIT compiler for the Array.prototype.slice method, which may lead to a missing bounds check and a buffer overflow. This could allow a remote attacker to impact the confidentiality, integrity, and availability of protected information.

Recommendations For Firefox versions prior to 66.0.1, update to version 66.0.1 or later. For Firefox ESR versions prior to 60.6.1, update to version 60.6.1 or later. For Thunderbird versions prior to 60.6.1, update to version 60.6.1 or later.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

ALSA-2025_16880

ALT-PU-2019-1498

ALT-PU-2019-1527

ALT-PU-2019-1561

ALT-PU-2019-2324

ALT-PU-2019-2486

BDU:2019-01276

CESA-2019_0671

CESA-2019_0672

CESA-2019_0680

CESA-2019_0681

CESA-2019_0966

CESA-2019_1144

CVE-2019-9810

DLA-1727-1

DSA-4417-1

ELSA-2019-0671

ELSA-2019-0672

ELSA-2019-0680

ELSA-2019-0681

ELSA-2019-0966

ELSA-2019-1144

MGASA-2019-0129

MGASA-2019-0131

OPENSUSE-SU-2019:1077-1

OPENSUSE-SU-2019:1126-1

OPENSUSE-SU-2019:1162-1

OPENSUSE-SU-2019_1056-1

OPENSUSE-SU-2019_1077-1

OPENSUSE-SU-2019_1152-1

OPENSUSE-SU-2019_1162-1

OPENSUSE-SU-2024:10600-1

OPENSUSE-SU-2024:10601-1

OPENSUSE-SU-2024:14572-1

RHSA-2019:0671

RHSA-2019:0672

RHSA-2019:0680

RHSA-2019:0681

RHSA-2019:0966

RHSA-2019:1144

RHSA-2019_0671

RHSA-2019_0672

RHSA-2019_0680

RHSA-2019_0681

RHSA-2019_0966

RHSA-2019_1144

SUSE-SU-2019:0852-1

SUSE-SU-2019:0853-1

SUSE-SU-2019:0871-1

SUSE-SU-2019_0852-1

SUSE-SU-2019_0871-1

USN-3919-1

USN-3927-1

ZDI-19-364

Affected Products

Alt Linux

Centos

Firefox

Firefox Esr

Red Hat

Suse

Thunderbird

Ubuntu

References · 2037

• 🔥 https://github.com/0vercl0k/CVE-2019-9810 · Exploit
• 🔥 https://github.com/xuechiyaobai/CVE-2019-9810-PoC · Exploit
• 🔥 https://bugzilla.mozilla.org/show_bug.cgi?id=1537924 · Exploit
• 🔥 https://exploit-db.com/exploits/47752 · Exploit
• 🔥 https://exploit-db.com/exploits/46605 · Exploit
• 🔥 http://packetstormsecurity.com/files/155592/Mozilla-Firefox-Windows-64-Bit-Chain-Exploit.html · Exploit
• https://osv.dev/vulnerability/DEBIAN-CVE-2019-9810 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/[e-mail]/thread/2LKJX4XFUISMUN6H4VQJY7MSG5SM7LGB · Vendor Advisory
• https://ubuntu.com/security/notices/USN-3927-1 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2019:1144 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:14572-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2019:1162-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2019-9796 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2019-0966.html · Vendor Advisory
• https://osv.dev/vulnerability/USN-3919-1 · Vendor Advisory