Mozilla Firefox和Mozilla Firefox ESR 资源管理错误漏洞

漏洞信息详情

Mozilla Firefox和Mozilla Firefox ESR 资源管理错误漏洞

CNNVD编号：CNNVD-201909-035
危害等级：高危-->
危害等级：高危
CVE编号： CVE-2019-11752
漏洞类型：资源管理错误
发布时间： 2019-09-03
威胁类型：
更新时间： 2019-12-12
厂商：
漏洞来源： Debian,Red Hat,Zha...

漏洞简介

Mozilla Firefox等都是美国Mozilla基金会的产品。Mozilla Firefox是一款开源Web浏览器。Mozilla Firefox ESR是Firefox(Web浏览器)的一个延长支持版本。Mozilla Thunderbird是一套从Mozilla Application Suite独立出来的电子邮件客户端软件。

基于Windows平台的Mozilla Firefox 69之前版本、Mozilla Firefox ESR 68.1之前版本和Firefox ESR 60.9之前版本中存在资源管理错误漏洞。攻击者可利用该漏洞提升权限。

漏洞公告

目前厂商已发布升级补丁以修复漏洞，补丁获取链接：

https://www.mozilla.org/en-US/security/advisories/mfsa2019-25/

https://www.mozilla.org/en-US/security/advisories/mfsa2019-27/

https://www.mozilla.org/en-US/security/advisories/mfsa2019-26/

参考网址

来源:CONFIRM

链接:https://www.mozilla.org/security/advisories/mfsa2019-30/

来源:SUSE

链接:http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00010.html

来源:SUSE

链接:http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00009.html

来源:CONFIRM

链接:https://www.mozilla.org/security/advisories/mfsa2019-29/

来源:SUSE

链接:http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00017.html

来源:CONFIRM

链接:https://www.mozilla.org/security/advisories/mfsa2019-27/

来源:CONFIRM

链接:https://www.mozilla.org/security/advisories/mfsa2019-25/

来源:CONFIRM

链接:https://www.mozilla.org/security/advisories/mfsa2019-26/

来源:SUSE

链接:http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00011.html

来源:MISC

链接:https://bugzilla.mozilla.org/show_bug.cgi?id=1501152

来源:usn.ubuntu.com

链接:https://usn.ubuntu.com/4122-1/

来源:www.suse.com

链接:https://www.suse.com/support/update/announcement/2019/suse-su-201914246-1.html

来源:www.debian.org

链接:https://www.debian.org/security/2019/dsa-4516

来源:security.business.xerox.com

链接:https://security.business.xerox.com/wp-content/uploads/2019/11/cert_XRX19-029_FFPSv2_Win10_SecurityBulletin_Nov2019.pdf

来源:security-tracker.debian.org

链接:https://security-tracker.debian.org/tracker/DLA-1910-1

来源:vigilance.fr

链接:https://vigilance.fr/vulnerability/Firefox-multiple-vulnerabilities-30233

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2019.3373/

来源:packetstormsecurity.com

链接:https://packetstormsecurity.com/files/155447/Gentoo-Linux-Security-Advisory-201911-07.html

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2019.4645/

来源:www.nsfocus.net

链接:http://www.nsfocus.net/vulndb/44291

来源:packetstormsecurity.com

链接:https://packetstormsecurity.com/files/154378/Debian-Security-Advisory-4516-1.html

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2019.3397/

来源:packetstormsecurity.com

链接:https://packetstormsecurity.com/files/154358/Red-Hat-Security-Advisory-2019-2663-01.html

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2019.3377/

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2019.4343/

来源:www.ibm.com

链接:https://www.ibm.com/support/pages/node/1127535

受影响实体

暂无

补丁

Mozilla Firefox 资源管理错误漏洞的修复措施

正文

Mozilla Firefox和Mozilla Firefox ESR 资源管理错误漏洞

漏洞信息详情