Lucene search
RedHatRHSA-2019:1604HistoryJun 25, 2019 - 4:27 p.m.
(RHSA-2019:1604) Critical: firefox security update
2019-06-2516:27:56
access.redhat.com
227
10 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
10 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
0.764 High
EPSS
Percentile
98.2%
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.
This update upgrades Firefox to version 60.7.2 ESR.
Security Fix(es):
-
Mozilla: Type confusion in Array.pop (CVE-2019-11707)
-
Mozilla: Sandbox escape using Prompt:Open (CVE-2019-11708)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| RedHat | 6 | ppc64 | firefox | < 60.7.2-1.el6_10 | firefox-60.7.2-1.el6_10.ppc64.rpm |
| RedHat | 6 | s390x | firefox-debuginfo | < 60.7.2-1.el6_10 | firefox-debuginfo-60.7.2-1.el6_10.s390x.rpm |
| RedHat | 6 | x86_64 | firefox-debuginfo | < 60.7.2-1.el6_10 | firefox-debuginfo-60.7.2-1.el6_10.x86_64.rpm |
| RedHat | 6 | x86_64 | firefox | < 60.7.2-1.el6_10 | firefox-60.7.2-1.el6_10.x86_64.rpm |
| RedHat | 6 | i686 | firefox | < 60.7.2-1.el6_10 | firefox-60.7.2-1.el6_10.i686.rpm |
| RedHat | 6 | s390x | firefox | < 60.7.2-1.el6_10 | firefox-60.7.2-1.el6_10.s390x.rpm |
| RedHat | 6 | ppc64 | firefox-debuginfo | < 60.7.2-1.el6_10 | firefox-debuginfo-60.7.2-1.el6_10.ppc64.rpm |
| RedHat | 6 | i686 | firefox-debuginfo | < 60.7.2-1.el6_10 | firefox-debuginfo-60.7.2-1.el6_10.i686.rpm |
Related
nessus
nessus
RHEL 7 : firefox (RHSA-2019:1603)
2019-06-26 00:00:00
openSUSE Security Update : MozillaThunderbird (openSUSE-2019-1594)
2019-06-24 00:00:00
Mozilla Thunderbird < 60.7.2
2019-06-25 00:00:00
openvas
openvas
Debian: Security Advisory (DLA-1836-1)
2019-06-26 00:00:00
Fedora Update for mozjs60 FEDORA-2019-c2ff49ef73
2019-06-25 00:00:00
CentOS Update for firefox CESA-2019:1603 centos7
2019-07-02 00:00:00
oraclelinux
oraclelinux
firefox security update
2019-07-30 00:00:00
firefox security update
2019-06-26 00:00:00
firefox security update
2019-06-25 00:00:00
fedora
fedora
[SECURITY] Fedora 30 Update: gjs-1.56.2-4.fc30
2019-06-24 00:56:59
[SECURITY] Fedora 30 Update: mozjs60-60.7.2-1.fc30
2019-06-24 00:57:00
[SECURITY] Fedora 29 Update: firefox-67.0.4-1.fc29
2019-06-22 02:56:57
redhat
redhat
(RHSA-2019:1603) Critical: firefox security update
2019-06-25 16:27:43
(RHSA-2019:1696) Critical: firefox security update
2019-07-08 08:01:28
(RHSA-2019:1626) Important: thunderbird security update
2019-06-27 09:27:20
mageia
mageia
Updated mozjs60 packages fix security vulnerability
2020-01-05 18:37:51
Updated thunderbird packages fix security vulnerabilities
2019-07-02 16:09:27
Updated firefox packages fix security vulnerability
2019-06-21 04:07:01
freebsd
freebsd
Mozilla -- multiple vulnerabilities
2019-06-20 00:00:00
Mozilla -- multiple vulnerabilities
2019-06-20 00:00:00
mozilla -- multiple vulnerabilities
2019-06-18 00:00:00
mozilla
mozilla
Security vulnerabilities fixed in Thunderbird 60.7.2 — Mozilla
2019-06-20 00:00:00
ubuntu
ubuntu
Thunderbird vulnerabilities
2019-07-01 00:00:00
Firefox vulnerability
2019-06-24 00:00:00
Firefox vulnerability
2019-06-19 00:00:00
debian
debian
[SECURITY] [DLA 1836-1] thunderbird security update
2019-06-25 09:20:58
[SECURITY] [DSA 4471-1] thunderbird security update
2019-06-24 21:20:35
[SECURITY] [DSA 4474-1] firefox-esr security update
2019-07-01 21:05:45
osv
osv
thunderbird - security update
2019-06-24 00:00:00
thunderbird - security update
2019-06-25 00:00:00
CVE-2019-11707
2019-07-23 14:15:15
centos
centos
firefox security update
2019-07-01 15:56:37
firefox security update
2019-07-01 15:53:24
thunderbird security update
2019-07-01 15:54:02
thn
thn
Firefox 67.0.4 Released — Mozilla Patches Second 0-Day Flaw This Week
2019-06-21 09:11:00
Tor Browser 8.5.2 Released — Update to Fix Critical Firefox Vulnerability
2019-06-20 09:57:00
Firefox Releases Critical Patch Update to Stop Ongoing Zero-Day Attacks
2019-06-19 02:59:00
suse
suse
Security update for MozillaThunderbird (critical)
2019-06-23 00:00:00
Security update for MozillaFirefox (important)
2019-06-23 00:00:00
Security update for MozillaFirefox (important)
2019-06-24 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 10 package thunderbird version 60.7.2-alt1
2019-06-22 00:00:00
Security fix for the ALT Linux 10 package firefox-esr version 60.7.2-alt1
2019-06-20 00:00:00
Security fix for the ALT Linux 10 package firefox-esr version 60.7.1-alt1
2019-06-18 00:00:00
zdt
zdt
Mozilla Firefox 67 - Array.pop JIT Type Confusion Exploit
2022-02-02 00:00:00
packetstorm
packetstorm
Mozilla Firefox 67 Array.pop JIT Type Confusion
2022-02-02 00:00:00
Spidermonkey IonMonkey Incorrect Prediction
2019-06-25 00:00:00
exploitdb
exploitdb
Mozilla Firefox 67 - Array.pop JIT Type Confusion
2022-02-02 00:00:00
threatpost
threatpost
Mozilla Fixes Second Actively-Exploited Firefox Flaw
2019-06-21 14:22:23
Pinterest Browser Extension Injects Unwanted Code into 5K Websites
2018-07-25 19:36:57
Mozilla Patches Firefox Critical Flaw Under Active Attack
2019-06-19 12:57:20
prion
prion
Design/Logic Flaw
2019-07-23 14:15:00
Type confusion
2019-07-23 14:15:00
veracode
veracode
Arbitrary Code Execution
2019-07-01 00:15:22
Denial Of Service (DoS)
2019-07-01 00:15:21
cve
cve
CVE-2019-11708
2019-07-23 14:15:00
CVE-2019-11707
2019-07-23 14:15:00
archlinux
archlinux
[ASA-201906-20] firefox: sandbox escape
2019-06-25 00:00:00
[ASA-201906-19] firefox-developer-edition: arbitrary code execution
2019-06-19 00:00:00
[ASA-201906-18] firefox: arbitrary code execution
2019-06-19 00:00:00
slackware
slackware
[slackware-security] mozilla-firefox
2019-06-21 06:54:37
[slackware-security] mozilla-firefox
2019-06-18 22:33:29
[slackware-security] mozilla-thunderbird
2019-06-21 06:54:55
symantec
symantec
Mozilla Firefox and Firefox ESR CVE-2019-11708 Security Bypass Vulnerability
2019-06-20 00:00:00
ubuntucve
ubuntucve
CVE-2019-11708
2019-06-21 00:00:00
CVE-2019-11707
2019-06-19 00:00:00
alpinelinux
alpinelinux
CVE-2019-11708
2019-07-23 14:15:00
CVE-2019-11707
2019-07-23 14:15:00
debiancve
debiancve
CVE-2019-11708
2019-07-23 14:15:00
CVE-2019-11707
2019-07-23 14:15:00
redhatcve
redhatcve
CVE-2019-11707
2022-01-13 06:46:43
CVE-2019-11708
2020-04-01 08:10:51
ibm
ibm
cisa_kev
cisa_kev
Mozilla Firefox and Thunderbird Sandbox Escape Vulnerability
2022-05-23 00:00:00
Mozilla Firefox and Thunderbird Type Confusion Vulnerability
2022-05-23 00:00:00
checkpoint_advisories
checkpoint_advisories
Mozilla Firefox Type Confusion (CVE-2019-11707)
2019-06-27 00:00:00
Mozilla Thunderbird Remote Code Execution (CVE-2019-11708)
2022-06-19 00:00:00
githubexploit
githubexploit
Exploit for Type Confusion in Mozilla Thunderbird
2019-08-18 07:41:01
attackerkb
attackerkb
CVE-2019-11707
2019-07-23 00:00:00
CVE-2019-11708
2019-07-23 00:00:00
kaspersky
kaspersky
KLA11510 Multiple vulnerabilities in Mozilla Thunderbird
2019-06-20 00:00:00
KLA11508 Type confusion vulnerability in Mozilla Firefox ESR
2019-06-18 00:00:00
KLA11507 Type confusion vulnerability in Mozilla Firefox
2019-06-18 00:00:00
10 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
10 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
0.764 High
EPSS
Percentile
98.2%
Related for RHSA-2019:1604