1. Home
  2. Security Advisories
  3. Mozilla
  4. MFSA-2019-19

[MFSA-2019-19] Security vulnerabilities fixed in Firefox 67.0.4 and Firefox ESR 60.7.2

Severity High
Affected Packages 2
Fixed Packages 2
CVEs 1
Info Packages References Vulnerabilities
  • CVE-2019-11708: sandbox escape using Prompt:Open (high) Insufficient vetting of parameters passed with the <code>Prompt:Open</code> IPC message between child and parent processes can result in the non-sandboxed parent process opening web content chosen by a compromised child process. When combined with additional vulnerabilities this could result in executing arbitrary code on the user's computer.
Package Affected Version
pkg:mozilla/Firefox%20ESR < 60.7.2
pkg:mozilla/Firefox < 67.0.4
Package Fixed Version
pkg:mozilla/Firefox%20ESR = 60.7.2
pkg:mozilla/Firefox = 67.0.4
ID
MFSA-2019-19
Severity
high
URL
https://www.mozilla.org/en-US/security/advisories/mfsa2019-19
Published
2019-06-20T00:00:00
(5 years ago)
Modified
2019-06-20T00:00:00
(5 years ago)
Other Advisories
Source # ID Name URL
Bugzilla 1559858 https://bugzilla.mozilla.org/show_bug.cgi?id=1559858
Type Package URL Namespace Name / Product Version Distribution / Platform Arch Patch / Fix
Affected pkg:mozilla/Firefox%20ESR Firefox ESR < 60.7.2
Fixed pkg:mozilla/Firefox%20ESR Firefox ESR = 60.7.2
Affected pkg:mozilla/Firefox Firefox < 67.0.4
Fixed pkg:mozilla/Firefox Firefox = 67.0.4
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories Exploits PoC Pubblication Date Modification Date
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories PoC Pubblication Date Modification Date