CVE-2019-17005

The plain text serializer used a fixed-size array for the number of <ol> elements it could process; however it was possible to overflow the static-sized array…

published January 8, 2020

CVSS
—
EPSS
2%
Percentile
79.6
In the wild
Unconfirmed
What it is

The plain text serializer used a fixed-size array for the number of <ol> elements it could process; however it was possible to overflow the static-sized array leading to memory corruption and a potentially exploitable crash. This vulnerability affects Thunderbird < 68.3, Firefox ESR < 68.3, and Firefox < 71.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01907 · 79.6th percentile
Published
2020-01-08T21:14Z
EPSS history
Timeline
  • 08 JAN 21:14Z
    The plain text serializer used a fixed-size array for the number of <ol> elements it could process; however it was possible to overflow the static-sized array…
    cvelistv5