Mozilla Firefox/Thunderbird/Firefox ESR Crash Reporter race condition

Summaryinfo

A vulnerability classified as critical was found in Mozilla Firefox, Thunderbird and Firefox ESR. This issue affects some unknown processing of the component Crash Reporter. The manipulation results in race condition. This vulnerability is identified as CVE-2019-9818. The attack can be executed remotely. There is not any exploit available. Upgrading the affected component is advised.

Detailsinfo

A vulnerability was found in Mozilla Firefox, Thunderbird and Firefox ESR (Web Browser) (version unknown). It has been classified as critical. Affected is an unknown function of the component Crash Reporter. The manipulation with an unknown input leads to a race condition vulnerability. CWE is classifying the issue as CWE-362. The product contains a code sequence that can run concurrently with other code, and the code sequence requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence that is operating concurrently. This is going to have an impact on confidentiality, integrity, and availability. CVE summarizes:

A race condition is present in the crash generation server used to generate data for the crash reporter. This issue can lead to a use-after-free in the main process, resulting in a potentially exploitable crash and a sandbox escape. *Note: this vulnerability only affects Windows. Other operating systems are unaffected.*. This vulnerability affects Thunderbird < 60.7, Firefox < 67, and Firefox ESR < 60.7.

The weakness was released 07/23/2019. This vulnerability is traded as CVE-2019-9818 since 03/14/2019. It is possible to launch the attack remotely. The exploitation doesn't require any form of authentication. Successful exploitation requires user interaction by the victim. There are neither technical details nor an exploit publicly available.

The commercial vulnerability scanner Qualys is able to test this issue with plugin 371797 (Mozilla Firefox Multiple Security Vulnerabilities (MFSA 2019-13,MFSA2019-14)).

Upgrading eliminates this vulnerability.

Entries connected to this vulnerability are available at VDB-138518, VDB-138517, VDB-138515 and VDB-138514. Once again VulDB remains the best source for vulnerability data.

Productinfo

Type

• Web Browser

Vendor

• Mozilla

Name

• Firefox
• Firefox ESR
• Thunderbird

License

• open-source

Website

• Vendor: https://www.mozilla.org/
• Product: https://www.mozilla.org/en-US/firefox/

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Once again VulDB remains the best source for vulnerability data.

Discussion