VDB
ALPINE-CVE-2019-11707
ALPINE-CVE-2019-11707
PUBLISHED
CVSS 8.800000190734863 HIGH
A type confusion vulnerability can occur when manipulating JavaScript objects due to issues in Array.pop. This can allow for an exploitable crash. We are aware of targeted attacks in the wild abusing this flaw. This vulnerability affects Firefox ESR < 60.7.1, Firefox < 67.0.3, and Thunderbird < 60.7.2.
Risk Scores
CVSS 3.1
8.800000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Alpine:v3.12 | mozjs60 | 0, 60.7.0-r0, 60.6.2-r0 |
| Alpine:v3.11 | mozjs60 | 60.7.0-r0, 0, 60.0.2-r0 |
| Alpine:v3.10 | mozjs60 | 0, 60.7.0-r0, 60.6.2-r0 |
Timeline
- Jul 23, 2019 CVE Published
- Nov 19, 2025 CVE Updated
- Apr 30, 2026 Distribution Patch