description: When aborting an operation, such as a fetch, an abort signal may be deleted while alerting the objects to be notified. This results in a use-after-free and we presume that with enough effort it could have been exploited to run arbitrary code. This vulnerability affects Firefox ESR < 68.12 and Thunderbird < 68.12.
problem types: Use-After-Free when aborting an operation
affected:
{
product: Firefox ESR
vendor: Mozilla
versions:
lessThan: 68.12, status: affected, version: unspecified, versionType: custom
}
{
product: Thunderbird
vendor: Mozilla
versions:
lessThan: 68.12, status: affected, version: unspecified, versionType: custom
}
