Lucene search

K
ubuntucveUbuntu.comUB:CVE-2019-9801
HistoryApr 26, 2019 - 12:00 a.m.

CVE-2019-9801

2019-04-2600:00:00
ubuntu.com
ubuntu.com
12

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

EPSS

0.002

Percentile

59.1%

Firefox will accept any registered Program ID as an external protocol
handler and offer to launch this local application when given a matching
URL on Windows operating systems. This should only happen if the program
has specifically registered itself as a “URL Handler” in the Windows
registry. Note: This issue only affects Windows operating systems. Other
operating systems are unaffected.
. This vulnerability affects Thunderbird
< 60.6, Firefox ESR < 60.6, and Firefox < 66.

Notes

Author Note
tyhicks mozjs contains a copy of the SpiderMonkey JavaScript engine
seth-arnold Only affects Windows

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

EPSS

0.002

Percentile

59.1%