Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2019-11708HistoryJul 23, 2019 - 2:15 p.m.
CVE-2019-11708
2019-07-2314:15:15
Debian Security Bug Tracker
security-tracker.debian.org
20
CVSS2
10
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
CVSS3
10
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
EPSS
0.025
Percentile
90.4%
Insufficient vetting of parameters passed with the Prompt:Open IPC message between child and parent processes can result in the non-sandboxed parent process opening web content chosen by a compromised child process. When combined with additional vulnerabilities this could result in executing arbitrary code on the user’s computer. This vulnerability affects Firefox ESR < 60.7.2, Firefox < 67.0.4, and Thunderbird < 60.7.2.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 999 | all | firefox | < 67.0.4-1 | firefox_67.0.4-1_all.deb |
| Debian | 12 | all | firefox-esr | < 60.7.2esr-1 | firefox-esr_60.7.2esr-1_all.deb |
| Debian | 11 | all | firefox-esr | < 60.7.2esr-1 | firefox-esr_60.7.2esr-1_all.deb |
| Debian | 999 | all | firefox-esr | < 60.7.2esr-1 | firefox-esr_60.7.2esr-1_all.deb |
| Debian | 13 | all | firefox-esr | < 60.7.2esr-1 | firefox-esr_60.7.2esr-1_all.deb |
| Debian | 12 | all | thunderbird | < 1:60.7.2-1 | thunderbird_1:60.7.2-1_all.deb |
| Debian | 11 | all | thunderbird | < 1:60.7.2-1 | thunderbird_1:60.7.2-1_all.deb |
| Debian | 999 | all | thunderbird | < 1:60.7.2-1 | thunderbird_1:60.7.2-1_all.deb |
| Debian | 13 | all | thunderbird | < 1:60.7.2-1 | thunderbird_1:60.7.2-1_all.deb |
Related
nessus
nessus
Mozilla Firefox ESR < 60.7.2
2019-06-20 00:00:00
Debian DSA-4474-1 : firefox-esr - security update
2019-07-02 00:00:00
freebsd
freebsd
Mozilla -- multiple vulnerabilities
2019-06-20 00:00:00
Mozilla -- multiple vulnerabilities
2019-06-20 00:00:00
openvas
openvas
Mageia: Security Advisory (MGASA-2019-0202)
2022-01-28 00:00:00
Mozilla Firefox Security Advisories (MFSA2019-19, MFSA2019-20) - Windows
2019-06-21 00:00:00
Fedora Update for firefox FEDORA-2019-1ae01e6688
2019-06-22 00:00:00
cvelist
cvelist
CVE-2019-11708
2019-07-23 13:20:03
fedora
fedora
[SECURITY] Fedora 29 Update: firefox-67.0.4-1.fc29
2019-06-22 02:56:57
[SECURITY] Fedora 30 Update: firefox-67.0.4-1.fc30
2019-06-22 01:05:52
[SECURITY] Fedora 30 Update: gjs-1.56.2-4.fc30
2019-06-24 00:56:59
mozilla
mozilla
Security vulnerabilities fixed in Firefox 67.0.4 and Firefox ESR 60.7.2 — Mozilla
2019-06-20 00:00:00
Security vulnerabilities fixed in Thunderbird 60.7.2 — Mozilla
2019-06-20 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 10 package firefox-esr version 60.7.2-alt1
2019-06-20 00:00:00
Security fix for the ALT Linux 10 package thunderbird version 60.7.2-alt1
2019-06-22 00:00:00
symantec
symantec
Mozilla Firefox and Firefox ESR CVE-2019-11708 Security Bypass Vulnerability
2019-06-20 00:00:00
ubuntucve
ubuntucve
CVE-2019-11708
2019-06-21 00:00:00
alpinelinux
alpinelinux
CVE-2019-11708
2019-07-23 14:15:15
ubuntu
ubuntu
Firefox vulnerability
2019-06-24 00:00:00
Thunderbird vulnerabilities
2019-07-01 00:00:00
veracode
veracode
Arbitrary Code Execution
2019-07-01 00:15:22
archlinux
archlinux
[ASA-201906-20] firefox: sandbox escape
2019-06-25 00:00:00
slackware
slackware
[slackware-security] mozilla-firefox
2019-06-21 06:54:37
prion
prion
Design/Logic Flaw
2019-07-23 14:15:00
cve
cve
CVE-2019-11708
2019-07-23 14:15:15
osv
osv
CVE-2019-11708
2019-07-23 14:15:15
firefox-esr - security update
2019-07-01 00:00:00
thunderbird - security update
2019-06-25 00:00:00
ibm
ibm
debian
debian
[SECURITY] [DSA 4474-1] firefox-esr security update
2019-07-01 21:05:45
[SECURITY] [DLA 1836-1] thunderbird security update
2019-06-25 09:20:58
[SECURITY] [DSA 4471-1] thunderbird security update
2019-06-24 21:20:35
kaspersky
kaspersky
KLA11504 Incorrect parameters parsing vulnerability in Mozilla Firefox
2019-06-20 00:00:00
KLA11505 Incorrect parameters parsing vulnerability in Mozilla Firefox ESR
2019-06-20 00:00:00
KLA11510 Multiple vulnerabilities in Mozilla Thunderbird
2019-06-20 00:00:00
nvd
nvd
CVE-2019-11708
2019-07-23 14:15:15
cisa_kev
cisa_kev
Mozilla Firefox and Thunderbird Sandbox Escape Vulnerability
2022-05-23 00:00:00
suse
suse
Security update for MozillaFirefox (important)
2019-06-24 00:00:00
Security update for MozillaThunderbird (critical)
2019-06-23 00:00:00
Security update for MozillaThunderbird (important)
2019-06-24 00:00:00
checkpoint_advisories
checkpoint_advisories
Mozilla Thunderbird Remote Code Execution (CVE-2019-11708)
2022-06-19 00:00:00
attackerkb
attackerkb
CVE-2019-11708
2019-07-23 00:00:00
redhatcve
redhatcve
CVE-2019-11708
2020-04-01 08:10:51
mageia
mageia
Updated firefox packages fix security vulnerability
2019-07-02 18:00:24
Updated thunderbird packages fix security vulnerabilities
2019-07-02 16:09:27
Updated mozjs60 packages fix security vulnerability
2020-01-05 18:37:51
githubexploit
githubexploit
Exploit for Type Confusion in Mozilla Thunderbird
2021-09-08 14:38:42
Exploit for Improper Input Validation in Mozilla Firefox Esr
2019-09-29 07:08:52
Exploit for CVE-2014-4210
2022-03-19 01:54:15
redhat
redhat
(RHSA-2019:1696) Critical: firefox security update
2019-07-08 08:01:28
(RHSA-2019:1603) Critical: firefox security update
2019-06-25 16:27:43
(RHSA-2019:1604) Critical: firefox security update
2019-06-25 16:27:56
oraclelinux
oraclelinux
firefox security update
2019-07-30 00:00:00
firefox security update
2019-06-25 00:00:00
firefox security update
2019-06-26 00:00:00
zdt
zdt
Mozilla FireFox (Windows 10 x64) - Full Chain Client Side Attack Exploit
2019-12-09 00:00:00
Mozilla Firefox 67 - Array.pop JIT Type Confusion Exploit
2022-02-02 00:00:00
centos
centos
firefox security update
2019-07-01 15:56:37
firefox security update
2019-07-01 15:53:24
thunderbird security update
2019-07-01 15:57:35
thn
thn
Firefox 67.0.4 Released — Mozilla Patches Second 0-Day Flaw This Week
2019-06-21 09:11:00
exploitpack
exploitpack
Mozilla FireFox (Windows 10 x64) - Full Chain Client Side Attack
2019-12-07 00:00:00
exploitdb
exploitdb
Mozilla FireFox (Windows 10 x64) - Full Chain Client Side Attack
2019-12-07 00:00:00
Mozilla Firefox 67 - Array.pop JIT Type Confusion
2022-02-02 00:00:00
packetstorm
packetstorm
Mozilla Firefox 67 Array.pop JIT Type Confusion
2022-02-02 00:00:00
threatpost
threatpost
Mozilla Fixes Second Actively-Exploited Firefox Flaw
2019-06-21 14:22:23
amazon
amazon
Critical: thunderbird
2019-07-18 18:17:00
securelist
securelist
IT threat evolution Q2 2019. Statistics
2019-08-19 10:00:00
gentoo
gentoo
Mozilla Firefox: Multiple vulnerabilities
2019-08-15 00:00:00
CVSS2
10
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
CVSS3
10
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
EPSS
0.025
Percentile
90.4%
Related for DEBIANCVE:CVE-2019-11708