cve/2019/CVE-2019-9810.md

CVE-2019-9810

Description

Incorrect alias information in IonMonkey JIT compiler for Array.prototype.slice method may lead to missing bounds check and a buffer overflow. This vulnerability affects Firefox < 66.0.1, Firefox ESR < 60.6.1, and Thunderbird < 60.6.1.

POC

Reference

• http://packetstormsecurity.com/files/155592/Mozilla-Firefox-Windows-64-Bit-Chain-Exploit.html

Github

• https://github.com/0vercl0k/0vercl0k
• https://github.com/0vercl0k/CVE-2019-11708
• https://github.com/0vercl0k/CVE-2019-9810
• https://github.com/0xT11/CVE-POC
• https://github.com/20142995/sectool
• https://github.com/ARPSyndicate/cvemon
• https://github.com/CVEDB/PoC-List
• https://github.com/CVEDB/awesome-cve-repo
• https://github.com/CVEDB/top
• https://github.com/GhostTroops/TOP
• https://github.com/JERRY123S/all-poc
• https://github.com/ZihanYe/web-browser-vulnerabilities
• https://github.com/a0viedo/demystifying-js-engines
• https://github.com/alphaSeclab/sec-daily-2019
• https://github.com/alphaSeclab/sec-daily-2020
• https://github.com/anquanscan/sec-tools
• https://github.com/b0o/starred
• https://github.com/cyberanand1337x/bug-bounty-2022
• https://github.com/developer3000S/PoC-in-GitHub
• https://github.com/fengjixuchui/Just-pwn-it-for-fun
• https://github.com/flabbergastedbd/cve-2019-11707
• https://github.com/fox-land/stars
• https://github.com/gaahrdner/starred
• https://github.com/hectorgie/PoC-in-GitHub
• https://github.com/hktalent/TOP
• https://github.com/hwiwonl/dayone
• https://github.com/hyperupcall/stars
• https://github.com/jbmihoub/all-poc
• https://github.com/lp008/Hack-readme
• https://github.com/m1ghtym0/browser-pwn
• https://github.com/mgaudet/SpiderMonkeyBibliography
• https://github.com/tunnelshade/cve-2019-11707
• https://github.com/vintagesucks/awesome-stars
• https://github.com/weeka10/-hktalent-TOP
• https://github.com/xuechiyaobai/CVE-2019-9810-PoC