Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
5
CVSSv2

CVE-2019-9801

Published: 26/04/2019 Updated: 29/04/2019
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
CVSS v3 Base Score: 5.3 | Impact Score: 1.4 | Exploitability Score: 3.9
VMScore: 445
Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Subscribe to Mozilla

Vulnerability Summary

Firefox will accept any registered Program ID as an external protocol handler and offer to launch this local application when given a matching URL on Windows operating systems. This should only happen if the program has specifically registered itself as a "URL Handler" in the Windows registry. *Note: This issue only affects Windows operating systems. Other operating systems are unaffected.*. This vulnerability affects Thunderbird < 60.6, Firefox ESR < 60.6, and Firefox < 66.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

mozilla firefox

mozilla firefox_esr

mozilla thunderbird

Vendor Advisories

Mozilla: Security vulnerabilities fixed in Thunderbird 60.6
Mozilla Foundation Security Advisory 2019-11 Security vulnerabilities fixed in Thunderbird 606 Announced March 19, 2019 Impact critical Products Thunderbird Fixed in Thunderbird 606 ...
Mozilla: Security vulnerabilities fixed in Firefox 66
Mozilla Foundation Security Advisory 2019-07 Security vulnerabilities fixed in Firefox 66 Announced March 19, 2019 Impact critical Products Firefox Fixed in Firefox 66 ...
Mozilla: Security vulnerabilities fixed in Firefox ESR 60.6
Mozilla Foundation Security Advisory 2019-08 Security vulnerabilities fixed in Firefox ESR 606 Announced March 19, 2019 Impact critical Products Firefox ESR Fixed in Firefox ESR 606 ...

References

CWE-20https://www.mozilla.org/security/advisories/mfsa2019-11/https://www.mozilla.org/security/advisories/mfsa2019-08/https://www.mozilla.org/security/advisories/mfsa2019-07/https://bugzilla.mozilla.org/show_bug.cgi?id=1527717https://nvd.nist.govhttps://www.mozilla.org/en-US/security/advisories/mfsa2019-11/
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
deserializationCVE-2024-4040cross-site scriptingCVE-2023-25790CVE-2024-2961XML external entityCVE-2024-26926CVE-2024-32806CVE-2024-32711
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook