CVE-2019-11721

Reference Links

• https://bugzilla.mozilla.org/show_bug.cgi?id=1256009
• https://www.mozilla.org/en-US/security/advisories/mfsa2019-21/
• https://www.mozilla.org/en-US/security/advisories/mfsa2019-21/#CVE-2019-11727
• https://www.mozilla.org/en-US/security/advisories/mfsa2019-28/
• http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00009.html
• http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00010.html
• http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00011.html
• http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00017.html
• https://security.gentoo.org/glsa/201908-12
• https://www.mozilla.org/security/advisories/mfsa2019-21/

Parent vulnerabilities

(Appears in the following advisories)

• MFSA2019-28
• MFSA2019-21

Peer vulnerabilities

(Found alongside the following vulnerabilities)

• CVE-2019-11711
• CVE-2019-11712
• CVE-2019-11713
• CVE-2019-11714
• CVE-2019-11729
• CVE-2019-11715
• CVE-2019-11716
• CVE-2019-11717
• CVE-2019-11719
• CVE-2019-11720
• CVE-2019-11721
• CVE-2019-11730
• CVE-2019-11723
• CVE-2019-11724
• CVE-2019-11725
• CVE-2019-11727
• CVE-2019-11728
• CVE-2019-11710
• CVE-2019-11709
• CVE-2019-9811
• CVE-2019-11718

Frequently Asked Questions

• What is CVE-2019-11721?

  CVE-2019-11721 is a vulnerability that allows for domain spoofing attacks in Firefox versions prior to 68.

• How does CVE-2019-11721 work?

  CVE-2019-11721 works by using the unicode latin 'kra' character to spoof a standard 'k' character in the address bar, which can lead to user confusion.

• Which software versions are affected by CVE-2019-11721?

  CVE-2019-11721 affects Firefox versions prior to 68.

• What is the severity of CVE-2019-11721?

  The severity of CVE-2019-11721 is rated as medium with a CVSS score of 6.5.

• How do I fix CVE-2019-11721?

  To fix CVE-2019-11721, update your Firefox browser to version 68 or above.