PT-2019-12483 · Mozilla+2 · Firefox+2

James Lee · Publicado 2019-05-21 · Atualizado 2024-12-12 · CVE-2019-11700

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 67

Description A hyperlink using the res: protocol can be used to open local files at a known location in Internet Explorer if a user approves execution when prompted. This issue only occurs on Windows, and other operating systems are unaffected.

Recommendations For versions prior to 67, update to version 67 or later to resolve the issue.

Correção

Missing Authorization

Enumeração de Fraquezas

CWE-862

Identificadores relacionados

ALT-PU-2019-1941

CVE-2019-11700

OPENSUSE-SU-2024:10600-1

OPENSUSE-SU-2024:14572-1

Produtos afetados

Alt Linux

Firefox

Internet Explorer

Referências · 1870

• https://suse.com/security/cve/CVE-2023-25728 · Nota
• https://suse.com/security/cve/CVE-2022-31743 · Nota
• https://suse.com/security/cve/CVE-2018-12392 · Nota
• https://suse.com/security/cve/CVE-2024-5698 · Nota
• https://suse.com/security/cve/CVE-2013-1701 · Nota
• https://suse.com/security/cve/CVE-2024-5687 · Nota
• https://suse.com/security/cve/CVE-2022-24713 · Nota
• https://suse.com/security/cve/CVE-2014-8642 · Nota
• https://suse.com/security/cve/CVE-2015-4516 · Nota
• https://suse.com/security/cve/CVE-2019-11716 · Nota
• https://suse.com/security/cve/CVE-2023-28176 · Nota
• https://suse.com/security/cve/CVE-2021-38494 · Nota
• https://suse.com/security/cve/CVE-2012-1965 · Nota
• https://suse.com/security/cve/CVE-2013-1687 · Nota
• https://suse.com/security/cve/CVE-2020-6822 · Nota