USN-4032-1 — firefox vulnerability

Summary

It was discovered that a sandboxed child process could open arbitrary web
content in the parent process via the Prompt:Open IPC message. When
combined with another vulnerability, an attacker could potentially exploit
this to execute arbitrary code.

Fixed packages 2

Release	Package	Fixed in
Ubuntu · 16.04 LTS 16.04:LTS	firefox	67.0.4+build1-0ubuntu0.16.04.1
Ubuntu · 18.04 LTS 18.04:LTS	firefox	67.0.4+build1-0ubuntu0.18.04.1

Vulnerabilities 1

Critical 10.0

CVE-2019-11708 Exploited Public exploit EPSS 56%

Insufficient vetting of parameters passed with the Prompt:Open IPC message between child and parent processes can resul…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine

Jul 23, 2019
KEV May 23, 2022

References

report
https://ubuntu.com/security/CVE-2019-11708

firefox vulnerability

Summary

Fixed packages 2

Vulnerabilities 1

Insufficient vetting of parameters passed with the Prompt:Open IPC message between child and parent processes can resul…

References