PT-2019-12483 · Mozilla+2 · Firefox+2

James Lee · Published 2019-05-21 · Updated 2024-12-12 · CVE-2019-11700

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 67

Description A hyperlink using the res: protocol can be used to open local files at a known location in Internet Explorer if a user approves execution when prompted. This issue only occurs on Windows, and other operating systems are unaffected.

Recommendations For versions prior to 67, update to version 67 or later to resolve the issue.

Fix

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

ALT-PU-2019-1941

CVE-2019-11700

OPENSUSE-SU-2024:10600-1

OPENSUSE-SU-2024:14572-1

Affected Products

Alt Linux

Firefox

Internet Explorer

References · 1870

• https://osv.dev/vulnerability/openSUSE-SU-2024:14572-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-11700 · Security Note
• https://ubuntu.com/security/CVE-2019-11700 · Vendor Advisory
• https://bugzilla.mozilla.org/show_bug.cgi?id=1549833 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2019-11700 · Security Note
• https://mozilla.org/security/advisories/mfsa2019-13 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2019-11700 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-11700 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:10600-1 · Vendor Advisory
• https://suse.com/security/cve/CVE-2023-25728 · Note
• https://suse.com/security/cve/CVE-2022-31743 · Note
• https://suse.com/security/cve/CVE-2018-12392 · Note
• https://suse.com/security/cve/CVE-2024-5698 · Note
• https://suse.com/security/cve/CVE-2013-1701 · Note
• https://suse.com/security/cve/CVE-2024-5687 · Note