CVE-2019-9811

ALTO 8.3CVE-2019-9811 · Published 23/07/2019 · updated 17/06/2026

In breve

CVE-2019-9811 è una vulnerabilità ALTO (CVSS 8.3) che riguarda firefox (mozilla), firefox esr (mozilla), thunderbird (mozilla).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 2.6%, superiore al 85.2% delle vulnerabilità.
Correzione: aggiornare a 68.0, 60.8 o successiva.

Package	Affected versions	Patched versions
firefox mozilla	`< 68.0`	`68.0`
firefox esr mozilla	`< 60.8`	`60.8`
thunderbird mozilla	`< 60.8`	`60.8`
suse package hub for suse linux enterprise novell	`= 12`	No fix yet

Description

As part of a winning Pwn2Own entry, a researcher demonstrated a sandbox escape by installing a malicious language pack and then opening a browser feature that used the compromised translation. This vulnerability affects Firefox ESR < 60.8, Firefox < 68, and Thunderbird < 60.8.

References

lists.opensuse.org/opensuse-security-announce/2019-07/msg00055.html · Third Party Advisory
lists.opensuse.org/opensuse-security-announce/2019-07/msg00058.html · Third Party Advisory
lists.opensuse.org/opensuse-security-announce/2019-08/msg00073.html · Third Party Advisory
lists.opensuse.org/opensuse-security-announce/2019-10/msg00011.html · Third Party Advisory
lists.opensuse.org/opensuse-security-announce/2019-10/msg00017.html · Third Party Advisory
bugzilla.mozilla.org/show_bug.cgi · Issue Tracking
bugzilla.mozilla.org/show_bug.cgi · Exploit
bugzilla.mozilla.org/show_bug.cgi · Exploit
lists.debian.org/debian-lts-announce/2019/08/msg00001.html · Mailing List
lists.debian.org/debian-lts-announce/2019/08/msg00002.html · Mailing List

Altre vulnerabilità di firefox

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free