CVE-2019-11751: High severity firefox esr vulnerability
Logging-related command line parameters are not properly sanitized when Firefox is launched by another program, such as when a user clicks on malicious links in a chat application. This can be used to write a log file to an arbitrary location such as the Windows 'Startup' folder. Note: this issue only affects Firefox on Windows operating systems.
Other sources
Logging-related command line parameters are not properly sanitized when Firefox is launched by another program, such as when a user clicks on malicious links in a chat application. This can be used to write a log file to an arbitrary location such as the Windows 'Startup' folder. <br>Note: this issue only affects Firefox on Windows operating systems.. This vulnerability affects Firefox < 69 and Firefox ESR < 68.1.
Affected Software
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is CVE-2019-11751?
CVE-2019-11751 is a vulnerability in Firefox where logging-related command line parameters are not properly sanitized when Firefox is launched by another program, allowing for the writing of a log file to an arbitrary location.
How does CVE-2019-11751 affect Mozilla Firefox?
CVE-2019-11751 affects Mozilla Firefox versions up to and including Firefox 69 and Firefox ESR 68.1.
What is the severity of CVE-2019-11751?
CVE-2019-11751 has a severity rating of 9, which is considered critical.
How can CVE-2019-11751 be exploited?
CVE-2019-11751 can be exploited by launching Firefox through another program and using malicious links in a chat application to write a log file to an arbitrary location.
What is the recommended remedy for CVE-2019-11751?
The recommended remedy for CVE-2019-11751 is to update Firefox to version 68.2 or later.