PT-2019-4561 · Mozilla+2 · Firefox+2
Abdulrahman Alqabandi
·
Publicado
2019-05-21
·
Atualizado
2024-12-12
·
CVE-2019-11697
CVSS v2.0
7.1
Alta
| Vetor | AV:N/AC:M/Au:N/C:N/I:C/A:N |
Name of the Vulnerable Software and Affected Versions
Firefox versions prior to 67
Description
The issue is related to the installation of extensions. When the ALT and "a" keys are pressed during an extension installation prompt, the extension is installed without the usual delay, allowing users to accept or decline the installation. A malicious web page could exploit this by using spoofing to trick users into installing a malicious extension. This could potentially allow a remote attacker to impact data integrity.
Recommendations
For versions prior to 67, update to version 67 or later to resolve the issue. As a temporary workaround, consider avoiding the use of the ALT and "a" keys during extension installation prompts until the issue is resolved.
Correção
RCE
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Firefox
Ubuntu