Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2019-9811HistoryJul 23, 2019 - 2:15 p.m.
CVE-2019-9811
2019-07-2314:15:00
Debian Security Bug Tracker
security-tracker.debian.org
24
0.008 Low
EPSS
Percentile
81.4%
As part of a winning Pwn2Own entry, a researcher demonstrated a sandbox escape by installing a malicious language pack and then opening a browser feature that used the compromised translation. This vulnerability affects Firefox ESR < 60.8, Firefox < 68, and Thunderbird < 60.8.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 999 | all | firefox | < 68.0-1 | firefox_68.0-1_all.deb |
| Debian | 12 | all | firefox-esr | < 60.8.0esr-1 | firefox-esr_60.8.0esr-1_all.deb |
| Debian | 11 | all | firefox-esr | < 60.8.0esr-1 | firefox-esr_60.8.0esr-1_all.deb |
| Debian | 10 | all | firefox-esr | < 60.8.0esr-1~deb10u1 | firefox-esr_60.8.0esr-1~deb10u1_all.deb |
| Debian | 999 | all | firefox-esr | < 60.8.0esr-1 | firefox-esr_60.8.0esr-1_all.deb |
| Debian | 13 | all | firefox-esr | < 60.8.0esr-1 | firefox-esr_60.8.0esr-1_all.deb |
| Debian | 12 | all | thunderbird | < 1:60.8.0-1 | thunderbird_1:60.8.0-1_all.deb |
| Debian | 11 | all | thunderbird | < 1:60.8.0-1 | thunderbird_1:60.8.0-1_all.deb |
| Debian | 10 | all | thunderbird | < 1:60.8.0-1~deb10u1 | thunderbird_1:60.8.0-1~deb10u1_all.deb |
| Debian | 999 | all | thunderbird | < 1:60.8.0-1 | thunderbird_1:60.8.0-1_all.deb |
Related
veracode
veracode
Sandbox Restrictions Bypass
2019-07-15 00:07:43
cvelist
cvelist
CVE-2019-9811
2019-07-23 13:26:03
alpinelinux
alpinelinux
CVE-2019-9811
2019-07-23 14:15:00
ubuntucve
ubuntucve
CVE-2019-9811
2019-07-11 00:00:00
cve
cve
CVE-2019-9811
2019-07-23 14:15:00
prion
prion
Design/Logic Flaw
2019-07-23 14:15:00
zdi
zdi
Mozilla Firefox Language Pack XUL Injection Sandbox Escape Vulnerability
2019-07-10 00:00:00
redhatcve
redhatcve
CVE-2019-9811
2020-04-08 17:15:22
nessus
nessus
Amazon Linux 2 : thunderbird (ALAS-2019-1267)
2019-08-12 00:00:00
Scientific Linux Security Update : thunderbird on SL7.x x86_64 (20190715)
2019-07-16 00:00:00
Debian DLA-1870-1 : thunderbird security update
2019-08-12 00:00:00
amazon
amazon
Critical: thunderbird
2019-08-08 15:57:00
oraclelinux
oraclelinux
firefox security update
2019-07-30 00:00:00
thunderbird security and bug fix update
2019-07-30 00:00:00
firefox security update
2019-07-11 00:00:00
openvas
openvas
Debian: Security Advisory (DLA-1870-1)
2019-08-03 00:00:00
CentOS Update for firefox CESA-2019:1765 centos6
2019-07-13 00:00:00
CentOS Update for firefox CESA-2019:1763 centos7
2019-07-13 00:00:00
centos
centos
thunderbird security update
2019-07-17 17:50:04
thunderbird security update
2019-07-17 16:37:25
firefox security update
2019-07-12 16:20:59
osv
osv
thunderbird - security update
2019-08-02 00:00:00
thunderbird - security update
2019-07-14 00:00:00
firefox-esr - security update
2019-08-02 00:00:00
redhat
redhat
(RHSA-2019:1764) Critical: firefox security update
2019-07-11 16:57:31
(RHSA-2019:1763) Critical: firefox security update
2019-07-11 16:55:21
(RHSA-2019:1775) Important: thunderbird security update
2019-07-15 12:08:34
debian
debian
[SECURITY] [DLA 1870-1] thunderbird security update
2019-08-02 09:46:15
[SECURITY] [DLA 1869-1] firefox-esr security update
2019-08-02 09:44:52
[SECURITY] [DSA 4482-1] thunderbird security update
2019-07-14 20:12:13
altlinux
altlinux
Security fix for the ALT Linux 10 package firefox-esr version 68.0.1-alt1
2019-07-19 00:00:00
Security fix for the ALT Linux 10 package thunderbird version 60.8.0-alt1
2019-07-10 00:00:00
Security fix for the ALT Linux 10 package thunderbird version 68.0-alt1
2019-08-29 00:00:00
slackware
slackware
[slackware-security] mozilla-firefox
2019-07-11 00:13:28
ubuntu
ubuntu
Thunderbird vulnerabilities
2019-07-17 00:00:00
Firefox regressions
2019-07-25 00:00:00
Firefox vulnerabilities
2019-07-12 00:00:00
suse
suse
Security update for MozillaFirefox (important)
2019-07-29 00:00:00
Security update for MozillaThunderbird (moderate)
2019-08-23 00:00:00
Security update for MozillaFirefox (important)
2019-07-21 00:00:00
mozilla
mozilla
Security vulnerabilities fixed in Firefox ESR 60.8 — Mozilla
2019-07-09 00:00:00
Security vulnerabilities fixed in Thunderbird 60.8 — Mozilla
2019-07-09 00:00:00
Security vulnerabilities fixed in Firefox 68 — Mozilla
2019-07-09 00:00:00
mageia
mageia
Updated thunderbird packages fix security vulnerability
2019-07-21 21:17:27
Updated firefox packages fix security vulnerability
2019-07-21 21:17:27
Updated firefox packages fix security vulnerability
2019-07-21 21:17:27
kaspersky
kaspersky
KLA11516 Multiple vulnerabilities in Mozilla Firefox ESR
2019-07-09 00:00:00
KLA11524 Multiple vulnerabilities in Mozilla Thunderbird
2019-07-09 00:00:00
KLA11515 Multiple vulnerabilities in Mozilla Firefox
2019-07-09 00:00:00
gentoo
gentoo
Mozilla Thunderbird: Multiple vulnerabilities
2019-08-16 00:00:00
Mozilla Firefox: Multiple vulnerabilities
2019-08-15 00:00:00
ibm
ibm
freebsd
freebsd
mozilla -- multiple vulnerabilities
2019-07-09 00:00:00
archlinux
archlinux
[ASA-201907-4] firefox: multiple issues
2019-07-17 00:00:00