Incorrect handling of proto mutations may lead to type confusion in IonMonkey JIT code and can be leveraged for arbitrary memory read and write. This vulnerability affects Firefox < 66.0.1, Firefox ESR < 60.6.1, and Thunderbird < 60.6.1.
{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_name": "firefox",
            "binary_version": "66.0.1+build1-0ubuntu0.14.04.1"
        },
        {
            "binary_name": "firefox-dev",
            "binary_version": "66.0.1+build1-0ubuntu0.14.04.1"
        },
        {
            "binary_name": "firefox-globalmenu",
            "binary_version": "66.0.1+build1-0ubuntu0.14.04.1"
        },
        {
            "binary_name": "firefox-mozsymbols",
            "binary_version": "66.0.1+build1-0ubuntu0.14.04.1"
        },
        {
            "binary_name": "firefox-testsuite",
            "binary_version": "66.0.1+build1-0ubuntu0.14.04.1"
        }
    ]
}{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_name": "thunderbird",
            "binary_version": "1:60.6.1+build2-0ubuntu0.14.04.1"
        },
        {
            "binary_name": "thunderbird-dev",
            "binary_version": "1:60.6.1+build2-0ubuntu0.14.04.1"
        },
        {
            "binary_name": "thunderbird-globalmenu",
            "binary_version": "1:60.6.1+build2-0ubuntu0.14.04.1"
        },
        {
            "binary_name": "thunderbird-gnome-support",
            "binary_version": "1:60.6.1+build2-0ubuntu0.14.04.1"
        },
        {
            "binary_name": "thunderbird-mozsymbols",
            "binary_version": "1:60.6.1+build2-0ubuntu0.14.04.1"
        },
        {
            "binary_name": "xul-ext-calendar-timezones",
            "binary_version": "1:60.6.1+build2-0ubuntu0.14.04.1"
        },
        {
            "binary_name": "xul-ext-gdata-provider",
            "binary_version": "1:60.6.1+build2-0ubuntu0.14.04.1"
        },
        {
            "binary_name": "xul-ext-lightning",
            "binary_version": "1:60.6.1+build2-0ubuntu0.14.04.1"
        }
    ]
}{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_name": "firefox",
            "binary_version": "66.0.1+build1-0ubuntu0.16.04.1"
        },
        {
            "binary_name": "firefox-dev",
            "binary_version": "66.0.1+build1-0ubuntu0.16.04.1"
        },
        {
            "binary_name": "firefox-globalmenu",
            "binary_version": "66.0.1+build1-0ubuntu0.16.04.1"
        },
        {
            "binary_name": "firefox-mozsymbols",
            "binary_version": "66.0.1+build1-0ubuntu0.16.04.1"
        },
        {
            "binary_name": "firefox-testsuite",
            "binary_version": "66.0.1+build1-0ubuntu0.16.04.1"
        }
    ]
}{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_name": "thunderbird",
            "binary_version": "1:60.6.1+build2-0ubuntu0.16.04.1"
        },
        {
            "binary_name": "thunderbird-dev",
            "binary_version": "1:60.6.1+build2-0ubuntu0.16.04.1"
        },
        {
            "binary_name": "thunderbird-globalmenu",
            "binary_version": "1:60.6.1+build2-0ubuntu0.16.04.1"
        },
        {
            "binary_name": "thunderbird-gnome-support",
            "binary_version": "1:60.6.1+build2-0ubuntu0.16.04.1"
        },
        {
            "binary_name": "thunderbird-mozsymbols",
            "binary_version": "1:60.6.1+build2-0ubuntu0.16.04.1"
        },
        {
            "binary_name": "xul-ext-calendar-timezones",
            "binary_version": "1:60.6.1+build2-0ubuntu0.16.04.1"
        },
        {
            "binary_name": "xul-ext-gdata-provider",
            "binary_version": "1:60.6.1+build2-0ubuntu0.16.04.1"
        },
        {
            "binary_name": "xul-ext-lightning",
            "binary_version": "1:60.6.1+build2-0ubuntu0.16.04.1"
        }
    ]
}{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_name": "firefox",
            "binary_version": "66.0.1+build1-0ubuntu0.18.04.1"
        },
        {
            "binary_name": "firefox-dev",
            "binary_version": "66.0.1+build1-0ubuntu0.18.04.1"
        },
        {
            "binary_name": "firefox-globalmenu",
            "binary_version": "66.0.1+build1-0ubuntu0.18.04.1"
        },
        {
            "binary_name": "firefox-mozsymbols",
            "binary_version": "66.0.1+build1-0ubuntu0.18.04.1"
        },
        {
            "binary_name": "firefox-testsuite",
            "binary_version": "66.0.1+build1-0ubuntu0.18.04.1"
        }
    ]
}{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_name": "thunderbird",
            "binary_version": "1:60.6.1+build2-0ubuntu0.18.04.1"
        },
        {
            "binary_name": "thunderbird-dev",
            "binary_version": "1:60.6.1+build2-0ubuntu0.18.04.1"
        },
        {
            "binary_name": "thunderbird-globalmenu",
            "binary_version": "1:60.6.1+build2-0ubuntu0.18.04.1"
        },
        {
            "binary_name": "thunderbird-gnome-support",
            "binary_version": "1:60.6.1+build2-0ubuntu0.18.04.1"
        },
        {
            "binary_name": "thunderbird-mozsymbols",
            "binary_version": "1:60.6.1+build2-0ubuntu0.18.04.1"
        },
        {
            "binary_name": "xul-ext-calendar-timezones",
            "binary_version": "1:60.6.1+build2-0ubuntu0.18.04.1"
        },
        {
            "binary_name": "xul-ext-gdata-provider",
            "binary_version": "1:60.6.1+build2-0ubuntu0.18.04.1"
        },
        {
            "binary_name": "xul-ext-lightning",
            "binary_version": "1:60.6.1+build2-0ubuntu0.18.04.1"
        }
    ]
}