Multiple vulnerabilities in Mozilla Firefox ESR

Description

Multiple vulnerabilities were found in Mozilla Firefox ESR. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, perform cross-site scripting attack, spoof user interface, obtain sensitive information, execute arbitrary code.

Below is a complete list of vulnerabilities:

1. Multiple sandbox escape vulnerabilities can be exploited to bypass security restrictions;
2. A CORS bypass vulnerability can be exploited to bypass security restrictions;
3. An use-after-free vulnerability can be exploited to cause denial of service;
4. A race condition vulnerability can be exploited to cause denial of service;
5. A HTML parsing error can be exploited to perform cross-site scripting attack;
6. An improper escape issue can be exploited to spoof user interface;
7. An out-of-bounds read vulnerabilitiy can be exploited to obtain sensitive information;
8. A same-origin policy issue can be exploited to obtain sensitive information;
9. Multiple memory corruptions vulnerabilities can be exploited remotely to execute arbitrary code.

Original advisories

• mfsa2019-22

Related products

• Mozilla-Firefox-ESR

CVE list

• CVE-2019-9811
  high
• CVE-2019-11711
  high
• CVE-2019-11712
  high
• CVE-2019-11713
  critical
• CVE-2019-11729
  warning
• CVE-2019-11715
  warning
• CVE-2019-11717
  warning
• CVE-2019-11719
  warning
• CVE-2019-11730
  warning
• CVE-2019-11709
  critical

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com