Back to search
CVE-2019-11751
Published: Sep 27, 2019
Modified: Aug 4, 2024
PUBLISHED
Description
Logging-related command line parameters are not properly sanitized when Firefox is launched by another program, such as when a user clicks on malicious links in a chat application. This can be used to write a log file to an arbitrary location such as the Windows 'Startup' folder. <br>*Note: this issue only affects Firefox on Windows operating systems.*. This vulnerability affects Firefox < 69 and Firefox ESR < 68.1.
| Vendor | Product | Versions |
|---|---|---|
Mozilla | Firefox | affected unspecified - < 69 |
Mozilla | Firefox ESR | affected unspecified - < 68.1 |
References
https://bugzilla.mozilla.org/show_bug.cgi?id=1572838
x_refsource_MISC
https://www.mozilla.org/security/advisories/mfsa2019-25/
x_refsource_CONFIRM
https://www.mozilla.org/security/advisories/mfsa2019-26/
x_refsource_CONFIRM
openSUSE-SU-2019:2251
vendor-advisory
x_refsource_SUSE
openSUSE-SU-2019:2260
vendor-advisory
x_refsource_SUSE
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now