Mozilla Firefox/Firefox ESR: Mehrere Schwachstellen

Summary

Product

Vulnerabilities 21

• Unscored —
  CVE-2019-11709

  Mozilla developers and community members reported memory safety bugs present in Firefox 67 and Firefox ESR 60.7. Some o…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Jul 23, 2019
• Unscored —
  CVE-2019-11710

  Mozilla developers and community members reported memory safety bugs present in Firefox 67. Some of these bugs showed e…

  Mozilla Firefox mozjs38 mozjs52 Browsers Ubuntu
  Jul 23, 2019
• Unscored —
  CVE-2019-11711

  When an inner window is reused, it does not consider the use of document.domain for cross-origin protections. If pages …

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Jul 23, 2019
• Unscored —
  CVE-2019-11712

  POST requests made by NPAPI plugins, such as Flash, that receive a status 308 redirect response can bypass CORS require…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Jul 23, 2019
• Unscored —
  CVE-2019-11713

  A use-after-free vulnerability can occur in HTTP/2 when a cached HTTP/2 stream is closed while still in use, resulting …

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Jul 23, 2019
• Unscored —
  CVE-2019-11714

  Necko can access a child on the wrong thread during UDP connections, resulting in a potentially exploitable crash in so…

  Mozilla Firefox mozjs38 mozjs52 Browsers Ubuntu
  Jul 23, 2019
• Unscored —
  CVE-2019-11715

  Due to an error while parsing page content, it is possible for properly sanitized user input to be misinterpreted and l…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Jul 23, 2019
• Unscored —
  CVE-2019-11716

  Until explicitly accessed by script, window.globalThis is not enumerable and, as a result, is not visible to code such …

  Mozilla Firefox mozjs38 mozjs52 Browsers Ubuntu
  Jul 23, 2019
• Unscored —
  CVE-2019-11717

  A vulnerability exists where the caret ("^") character is improperly escaped constructing some URIs due to it being use…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Jul 23, 2019
• Unscored —
  CVE-2019-11718

  Activity Stream can display content from sent from the Snippet Service website. This content is written to innerHTML on…

  Mozilla Firefox mozjs38 mozjs52 Browsers Ubuntu
  Jul 23, 2019
• Unscored —
  CVE-2019-11719

  When importing a curve25519 private key in PKCS#8format with leading 0x00 bytes, it is possible to trigger an out-of-bo…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Jul 23, 2019
• Unscored —
  CVE-2019-11720

  Some unicode characters are incorrectly treated as whitespace during the parsing of web content instead of triggering p…

  Mozilla Firefox mozjs38 mozjs52 Browsers Ubuntu
  Jul 23, 2019
• Unscored —
  CVE-2019-11721

  The unicode latin 'kra' character can be used to spoof a standard 'k' character in the addressbar. This allows for doma…

  Mozilla Firefox mozjs38 mozjs52 Browsers Ubuntu
  Jul 23, 2019
• Unscored —
  CVE-2019-11723

  A vulnerability exists during the installation of add-ons where the initial fetch ignored the origin attributes of the …

  Mozilla Firefox mozjs38 mozjs52 Browsers Ubuntu
  Jul 23, 2019
• Unscored —
  CVE-2019-11724

  Application permissions give additional remote troubleshooting permission to the site input.mozilla.org, which has been…

  Mozilla Firefox mozjs38 mozjs52 Browsers Ubuntu
  Jul 23, 2019
• Unscored —
  CVE-2019-11725

  When a user navigates to site marked as unsafe by the Safebrowsing API, warning messages are displayed and navigation i…

  Mozilla Firefox mozjs38 mozjs52 Browsers Ubuntu
  Jul 23, 2019
• Unscored —
  CVE-2019-11727

  A vulnerability exists where it possible to force Network Security Services (NSS) to sign CertificateVerify with PKCS#1…

  Mozilla Firefox thunderbird mozjs38 Browsers Debian Ubuntu
  Jul 23, 2019
• Unscored —
  CVE-2019-11728

  The HTTP Alternative Services header, Alt-Svc, can be used by a malicious site to scan all TCP ports of any host that t…

  Mozilla Firefox mozjs38 mozjs52 Browsers Ubuntu
  Jul 23, 2019
• Unscored —
  CVE-2019-11729

  Empty or malformed p256-ECDH public keys may trigger a segmentation fault due values being improperly sanitized before …

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Jul 23, 2019
• Unscored —
  CVE-2019-11730 Public exploit EPSS 20%

  A vulnerability exists where if a user opens a locally saved HTML file, this file can use file: URIs to access other fi…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Jul 23, 2019
• Unscored —
  CVE-2019-9811

  As part of a winning Pwn2Own entry, a researcher demonstrated a sandbox escape by installing a malicious language pack …

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Jul 23, 2019

Revision history

1. 2025-06-02 #25

   Neue Updates von XEROX aufgenommen

2. 2024-02-19 #24

   Neue Updates von Amazon aufgenommen

3. 2023-02-22 #23

   Neue Updates von Amazon aufgenommen

4. 2021-07-12 #22

   Neue Updates von Amazon aufgenommen

5. 2021-03-21 #21

   Neue Updates von Red Hat aufgenommen

6. 2020-10-11 #20

   Neue Updates von AVAYA aufgenommen

7. 2020-09-29 #19

   Neue Updates von Red Hat und Debian aufgenommen

8. 2020-07-06 #18

   Neue Updates von SUSE aufgenommen

9. 2019-12-30 #17

   Neue Updates von SUSE aufgenommen

10. 2019-12-26 #16

    Neue Updates von CentOS aufgenommen

11. 2019-12-15 #15

    Neue Updates von AVAYA aufgenommen

12. 2019-12-10 #14

    Neue Updates von Red Hat aufgenommen

13. 2019-10-09 #13

    Neue Updates von SUSE aufgenommen

14. 2019-10-03 #12

    Neue Updates von SUSE aufgenommen

15. 2019-08-18 #11

    Neue Updates von SUSE aufgenommen

16. 2019-08-15 #10

    Neue Updates von GENTOO aufgenommen

17. 2019-07-30 #9

    Neue Updates von Red Hat aufgenommen

18. 2019-07-29 #8

    Neue Updates von SUSE aufgenommen

19. 2019-07-25 #7

    Neue Updates von Ubuntu aufgenommen

20. 2019-07-17 #6

    Neue Updates von SUSE aufgenommen

21. 2019-07-16 #4

    Neue Updates von Ubuntu aufgenommen

22. 2019-07-16 #5

    Neue Updates von Arch Linux aufgenommen

23. 2019-07-14 #3

    Neue Updates von CentOS

24. 2019-07-11 #2

    Neue Updates von Red Hat, Oracle Linux und Debian aufgenommen

25. 2019-07-09 #1

    Initiale Fassung

References

• Mozilla Security Advisories vom 2019-07-09
  https://www.mozilla.org/en-US/security/advisories/mfsa2019-21/
• Mozilla Security Advisories vom 2019-07-09
  https://www.mozilla.org/en-US/security/advisories/mfsa2019-22/
• Red Hat Security Advisory RHSA-2019:1764 vom 2019-07-11
  https://access.redhat.com/errata/RHSA-2019:1764
• Red Hat Security Advisory RHSA-2019:1765 vom 2019-07-12
  https://access.redhat.com/errata/RHSA-2019:1765
• Red Hat Security Advisory RHSA-2019:1763 vom 2019-07-12
  https://access.redhat.com/errata/RHSA-2019:1763
• Oracle Linux Security Advisory ELSA-2019-1765 vom 2019-07-12
  http://linux.oracle.com/errata/ELSA-2019-1765.html
• Oracle Linux Security Advisory ELSA-2019-1763 vom 2019-07-12
  http://linux.oracle.com/errata/ELSA-2019-1763.html
• Debian Security Advisory DSA-4479 vom 2019-07-12
  http://www.debian.org/security/2019/dsa-4479
• CentOS-announce CESA-2019:1763 vom 2019-07-11
  https://lists.centos.org/pipermail/centos-announce/2019-July/023365.html
• CentOS-announce CESA-2019:1765 vom 2019-07-11
  https://lists.centos.org/pipermail/centos-announce/2019-July/023364.html
• Ubuntu Security Notice USN-4060-1 vom 2019-07-16
  https://usn.ubuntu.com/4060-2/
• Ubuntu Security Notice USN-4060-1 vom 2019-07-16
  https://usn.ubuntu.com/4060-1/
• Arch Linux Security Advisory ASA-201907-4 vom 2019-07-17
  https://security.archlinux.org/ASA-201907-4
• SUSE Security Update SUSE-SU-2019:1869-1 vom 2019-07-17
  https://www.suse.com/support/update/announcement/2019/suse-su-20191869-1.html
• SUSE Security Update SUSE-SU-2019:14124-1 vom 2019-07-17
  https://www.suse.com/support/update/announcement/2019/suse-su-201914124-1.html
• SUSE Security Update SUSE-SU-2019:1861-1 vom 2019-07-17
  https://www.suse.com/support/update/announcement/2019/suse-su-20191861-1.html
• Ubuntu Security Notice USN-4054-1 vom 2019-07-26
  https://usn.ubuntu.com/4054-2/
• SUSE Security Update SUSE-SU-2019:1861-2 vom 2019-07-29
  https://www.suse.com/support/update/announcement/2019/suse-su-20191861-2.html
• Red Hat Security Advisory RHSA-2019:1951 vom 2019-07-31
  https://access.redhat.com/errata/RHSA-2019:1951
• GENTOO Security Advisory GLSA201908-12 vom 2019-08-15
  https://security.gentoo.org/glsa/201908-12
• SUSE Security Update SUSE-SU-2019:1861-3 vom 2019-08-17
  https://www.suse.com/support/update/announcement/2019/suse-su-20191861-3.html
• SUSE Security Update SUSE-SU-2019:2545-1 vom 2019-10-04
  https://www.suse.com/support/update/announcement/2019/suse-su-20192545-1.html
• SUSE Security Update SUSE-SU-2019:2515-1 vom 2019-10-03
  https://www.suse.com/support/update/announcement/2019/suse-su-20192515-1.html
• SUSE Security Update SUSE-SU-2019:2620-1 vom 2019-10-09
  https://www.suse.com/support/update/announcement/2019/suse-su-20192620-1.html
• Red Hat Security Advisory RHSA-2019:4190 vom 2019-12-10
  https://access.redhat.com/errata/RHSA-2019:4190
• AVAYA Security Advisory ASA-2019-247 vom 2019-12-15
  https://downloads.avaya.com/css/P8/documents/101062926
• CentOS Security Advisory CESA-2019:4190 vom 2019-12-24
  http://centos-announce.2309468.n4.nabble.com/CentOS-announce-CESA-2019-4190-Important-CentOS-7-nss-util-Security-Update-tp4645789.html
• CentOS Security Advisory CESA-2019:4190 vom 2019-12-24
  http://centos-announce.2309468.n4.nabble.com/CentOS-announce-CESA-2019-4190-Important-CentOS-7-nss-Security-Update-tp4645792.html
• CentOS Security Advisory CESA-2019:4190 vom 2019-12-24
  http://centos-announce.2309468.n4.nabble.com/CentOS-announce-CESA-2019-4190-Important-CentOS-7-nss-softokn-Security-Update-tp4645791.html
• SUSE Security Update SUSE-SU-2019:3395-1 vom 2019-12-30
  https://www.suse.com/support/update/announcement/2019/suse-su-20193395-1.html
• SUSE Security Update SUSE-SU-2020:14418-1 vom 2020-07-06
  http://lists.suse.com/pipermail/sle-security-updates/2020-July/007079.html
• Red Hat Security Advisory RHSA-2020:4076 vom 2020-09-29
  https://access.redhat.com/errata/RHSA-2020:4076
• Debian Security Advisory DLA-2388 vom 2020-09-29
  https://lists.debian.org/debian-lts-announce/2020/debian-lts-announce-202009/msg00029.html
• AVAYA Security Advisory ASA-2020-119 vom 2020-10-10
  https://downloads.avaya.com/css/P8/documents/101071288
• Red Hat Security Advisory RHSA-2021:0949 vom 2021-03-22
  https://access.redhat.com/errata/RHSA-2021:0949
• Amazon Linux Security Advisory ALAS-2021-1522 vom 2021-07-13
  https://alas.aws.amazon.com/ALAS-2021-1522.html
• Amazon Linux Security Advisory ALAS-2023-1942 vom 2023-02-22
  https://alas.aws.amazon.com/AL2/ALAS-2023-1942.html
• Amazon Linux Security Advisory ALAS-2024-2470 vom 2024-02-19
  https://alas.aws.amazon.com/AL2/ALAS-2024-2470.html
• XEROX Security Advisory XRX25-012 vom 2025-06-02
  https://security.business.xerox.com/wp-content/uploads/2025/06/Xerox-Security-Bulletin-XRX25-012-for-Xerox-FreeFlow-Print-Server-v9.pdf