CVE-2019-11751

Reference Links

• https://bugzilla.mozilla.org/show_bug.cgi?id=1572838
• https://www.mozilla.org/en-US/security/advisories/mfsa2019-26/
• http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00011.html
• http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00017.html
• https://www.mozilla.org/security/advisories/mfsa2019-25/
• https://www.mozilla.org/security/advisories/mfsa2019-26/
• https://www.mozilla.org/en-US/security/advisories/mfsa2019-26/#CVE-2019-11750
• https://www.mozilla.org/en-US/security/advisories/mfsa2019-25/

Parent vulnerabilities

(Appears in the following advisories)

• MFSA2019-26
• MFSA2019-25

Peer vulnerabilities

(Found alongside the following vulnerabilities)

• CVE-2019-11751
• CVE-2019-11746
• CVE-2019-11744
• CVE-2019-11742
• CVE-2019-11736
• CVE-2019-11753
• CVE-2019-11752
• CVE-2019-9812
• CVE-2019-11743
• CVE-2019-11748
• CVE-2019-11749
• CVE-2019-11750
• CVE-2019-11738
• CVE-2019-11747
• CVE-2019-11735
• CVE-2019-11740
• CVE-2019-11741
• CVE-2019-5849
• CVE-2019-11737
• CVE-2019-11734
• CVE-2019-11758

Frequently Asked Questions

• What is CVE-2019-11751?

  CVE-2019-11751 is a vulnerability in Firefox where logging-related command line parameters are not properly sanitized when Firefox is launched by another program, allowing for the writing of a log file to an arbitrary location.

• How does CVE-2019-11751 affect Mozilla Firefox?

  CVE-2019-11751 affects Mozilla Firefox versions up to and including Firefox 69 and Firefox ESR 68.1.

• What is the severity of CVE-2019-11751?

  CVE-2019-11751 has a severity rating of 9, which is considered critical.

• How can CVE-2019-11751 be exploited?

  CVE-2019-11751 can be exploited by launching Firefox through another program and using malicious links in a chat application to write a log file to an arbitrary location.

• What is the recommended remedy for CVE-2019-11751?

  The recommended remedy for CVE-2019-11751 is to update Firefox to version 68.2 or later.