[ASA-201906-19] firefox-developer-edition: arbitrary code execution
foxboron at archlinux.org
Mon Jul 1 19:00:08 UTC 2019
Arch Linux Security Advisory ASA-201906-19
Date : 2019-06-19
CVE-ID : CVE-2019-11707
Package : firefox-developer-edition
Type : arbitrary code execution
Remote : Yes
Link : https://security.archlinux.org/AVG-995
The package firefox-developer-edition before version 68.0b11-1 is
vulnerable to arbitrary code execution.
Upgrade to 68.0b11-1.
# pacman -Syu "firefox-developer-edition>=68.0b11-1"
The problem has been fixed upstream in version 68.0b11.
objects due to issues in Array.pop, in Firefox before 67.0.3. This can
allow for an exploitable crash. Mozilla has been made aware of targeted
attacks in the wild abusing this flaw.
-------------- next part --------------
A non-text attachment was scrubbed...
Size: 833 bytes
Desc: not available
More information about the arch-security