description: When processing callbacks that occurred during window flushing in the parent process, the associated window may die; causing a use-after-free condition. This could have led to memory corruption and a potentially exploitable crash. This vulnerability affects Firefox ESR < 68.10, Firefox < 78, and Thunderbird < 68.10.0.
problem types: Use-after-free in nsGlobalWindowInner
affected:
{
product: Firefox ESR
vendor: Mozilla
versions:
lessThan: 68.10, status: affected, version: unspecified, versionType: custom
}
{
product: Firefox
vendor: Mozilla
versions:
lessThan: 78, status: affected, version: unspecified, versionType: custom
}
{
product: Thunderbird
vendor: Mozilla
versions:
lessThan: 68.10.0, status: affected, version: unspecified, versionType: custom
}
