Multiple vulnerabilities in Mozilla Firefox ESR

Description

Multiple vulnerabilities were found in Mozilla Firefox ESR. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code, perform cross-site scripting attack, bypass security restrictions, gain privileges.

Below is a complete list of vulnerabilities:

1. A vulnerability can be exploited remotely to execute arbitrary code;
2. Multiple memory corruption vulnerabilities can be exploited to execute arbitrary code;
3. A vulnerability can be exploited remotely to perform cross-site scripting attacks;
4. A sandbox escape vulnerability can be exploited to bypass security restrictions;
5. A type confusion vulnerability can be exploited to cause denial of service;
6. A same-origin policy violation vulnerability can be exploited to bypass security restrictions;
7. Multiple race condition vulnerabilities in Mozilla Maintenance Service can be exploited to gain privileges;
8. A vulnerability in WebRTC can be exploited to bypass security restrictions;
9. Multiple use-after-free vulnerabilities can be exploited remotely to cause denial of service;
10. A cross-origin access vulnerability can be exploited to bypass security restrictions;

Original advisories

• mfsa2019-27

• mfsa2019-26

Related products

• Mozilla-Firefox-ESR

CVE list

• CVE-2019-11751
  high
• CVE-2019-11752
  critical
• CVE-2019-11735
  high
• CVE-2019-11746
  high
• CVE-2019-9812
  high
• CVE-2019-11750
  warning
• CVE-2019-11742
  warning
• CVE-2019-11738
  high
• CVE-2019-11749
  warning
• CVE-2019-11753
  warning
• CVE-2019-11736
  warning
• CVE-2019-11748
  warning
• CVE-2019-11740
  high
• CVE-2019-11747
  warning
• CVE-2019-11744
  warning
• CVE-2019-11743
  warning

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com