CVE-2019-9817

🗓️ 23 Jul 2019 13:24:05Reported by mozillaType

Images from a different domain can be read using a canvas object, affecting Thunderbird, Firefox, and Firefox ES

Reporter	Title	Published	Views	Family All 166
IBM Security Bulletins	Security Bulletin: WebSphere Cast Iron and App Connect Professional are affected by vulnerabilities in busybox, arpwatch, apr, acpid, augeas, firefox, ctdb.	15 Dec 202107:41	–	ibm
IBM Security Bulletins	Security Bulletin: Synthetic Playback Agent 8.1.x is affected by multiple vulnerabilities	8 Aug 201909:37	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Mozilla Firefox vulnerability in IBM SONAS	8 Jul 201908:00	–	ibm
FreeBSD	mozilla -- multiple vulnerabilities	21 May 201900:00	–	freebsd
Tenable Nessus	Mozilla Firefox < 67.0 Multiple Vulnerabilities	21 May 201900:00	–	nessus
Tenable Nessus	Mozilla Firefox ESR < 60.7 Multiple Vulnerabilities	21 May 201900:00	–	nessus
Tenable Nessus	Mozilla Thunderbird < 60.7 Multiple Vulnerabilities	21 May 201600:00	–	nessus
Tenable Nessus	Amazon Linux 2 : thunderbird (ALAS-2019-1229)	14 Jun 201900:00	–	nessus
Tenable Nessus	CentOS 8 : firefox (CESA-2019:1269)	29 Jan 202100:00	–	nessus
Tenable Nessus	CentOS 8 : thunderbird (CESA-2019:1308)	29 Jan 202100:00	–	nessus

[
  {
    "product": "Thunderbird",
    "vendor": "Mozilla",
    "versions": [
      {
        "lessThan": "60.7",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "Firefox",
    "vendor": "Mozilla",
    "versions": [
      {
        "lessThan": "67",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "Firefox ESR",
    "vendor": "Mozilla",
    "versions": [
      {
        "lessThan": "60.7",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
mozilla	www.mozilla.org/security/advisories/mfsa2019-15/
mozilla	www.mozilla.org/security/advisories/mfsa2019-14/
bugzilla	www.bugzilla.mozilla.org/show_bug.cgi
mozilla	www.mozilla.org/security/advisories/mfsa2019-13/

23 Jul 2019 13:24Current

5.5Medium risk

Vulners AI Score5.5

EPSS0.00825