description: Manipulating individual parts of a URL object could have caused an out-of-bounds read, leaking process memory to malicious JavaScript. This vulnerability affects Firefox ESR < 68.10, Firefox < 78, and Thunderbird < 68.10.0.
problem types: Information disclosure due to manipulated URL object
affected:
{
product: Firefox ESR
vendor: Mozilla
versions:
lessThan: 68.10, status: affected, version: unspecified, versionType: custom
}
{
product: Firefox
vendor: Mozilla
versions:
lessThan: 78, status: affected, version: unspecified, versionType: custom
}
{
product: Thunderbird
vendor: Mozilla
versions:
lessThan: 68.10.0, status: affected, version: unspecified, versionType: custom
}
