PT-2020-6740 · Mozilla+1 · Firefox+1

Siye Lui · Published 2020-01-07 · Updated 2021-02-18 · CVE-2019-17018

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 72

Description The issue is related to information disclosure. It may allow a remote attacker to disclose protected information. The problem occurs when using Private Browsing Mode on Windows 10, where the Windows keyboard may retain word suggestions.

Recommendations For versions prior to 72, update to version 72 or later to resolve the issue.

Exploit

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

ALT-PU-2020-1110

ALT-PU-2020-1617

ALT-PU-2020-2408

ALT-PU-2020-2933

ALT-PU-2021-1368

BDU:2022-05928

CVE-2019-17018

Affected Products

Alt Linux

Firefox

References · 22

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/firefox_jit_use_after_free.rb · Exploit
• 🔥 https://github.com/maxpl0it/CVE-2019-17026-Exploit · Exploit
• 🔥 https://github.com/aleksejspopovs/cve-2020-16012 · Exploit
• 🔥 https://github.com/lsw29475/CVE-2019-17026 · Exploit
• 🔥 https://github.com/rojhack/CVE-2020-6514 · Exploit
• 🔥 https://github.com/hasan-khalil/CVE-2020-6514 · Exploit
• 🔥 https://github.com/HassanAzze/CVE-2020-6514 · Exploit
• 🔥 https://github.com/R0jhack/CVE-2020-6514 · Exploit
• 🔥❌ https://github.com/marcinguy/CVE-2020-15999 · Exploit, Deleted
• https://nvd.nist.gov/vuln/detail/CVE-2019-17018 · Security Note
• https://ubuntu.com/security/CVE-2019-17018 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-17018 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-17018 · Security Note
• https://bugzilla.mozilla.org/show_bug.cgi?id=1549394 · Vendor Advisory
• https://bdu.fstec.ru/vul/2022-05928 · Security Note