Hide Forgot
A use-after-free vulnerability can occur when a raw pointer to a DOM element on a page is obtained using JavaScript and the element is then removed while still in use. This results in a potentially exploitable crash. External Reference: https://www.mozilla.org/en-US/security/advisories/mfsa2019-08/#CVE-2019-9790
Acknowledgments: Name: the Mozilla project Upstream: Brandon Wieser
This issue has been addressed in the following products: Red Hat Enterprise Linux 7 Via RHSA-2019:0622 https://access.redhat.com/errata/RHSA-2019:0622
This issue has been addressed in the following products: Red Hat Enterprise Linux 6 Via RHSA-2019:0623 https://access.redhat.com/errata/RHSA-2019:0623
Statement: In general, this flaw be exploited through email in the Thunderbird product because scripting is disabled when reading mail, but are potentially risks in browser or browser-like contexts.
This issue has been addressed in the following products: Red Hat Enterprise Linux 6 Via RHSA-2019:0680 https://access.redhat.com/errata/RHSA-2019:0680
This issue has been addressed in the following products: Red Hat Enterprise Linux 7 Via RHSA-2019:0681 https://access.redhat.com/errata/RHSA-2019:0681
This issue has been addressed in the following products: Red Hat Enterprise Linux 8 Via RHSA-2019:0966 https://access.redhat.com/errata/RHSA-2019:0966
This issue has been addressed in the following products: Red Hat Enterprise Linux 8 Via RHSA-2019:1144 https://access.redhat.com/errata/RHSA-2019:1144