The ShutdownObserver()
was susceptible to potentially undefined behavior due to its reliance on a dynamic type that lacked a virtual destructor. This vulnerability affects Firefox ESR < 115.6, Thunderbird < 115.6, and Firefox < 121.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Firefox | Mozilla | * | 121.0 (excluding) |
Firefox_esr | Mozilla | * | 115.6 (excluding) |
Thunderbird | Mozilla | * | 115.6 (excluding) |