CVE-2019-17009

Reference Links

• https://bugzilla.mozilla.org/show_bug.cgi?id=1510494
• https://www.mozilla.org/en-US/security/advisories/mfsa2019-38/
• https://www.mozilla.org/en-US/security/advisories/mfsa2019-36/
• https://www.mozilla.org/en-US/security/advisories/mfsa2019-37/
• https://www.mozilla.org/en-US/security/advisories/mfsa2019-38/#CVE-2019-11745
• http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00000.html
• http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00001.html
• https://www.mozilla.org/security/advisories/mfsa2019-36/
• https://www.mozilla.org/security/advisories/mfsa2019-37/
• https://www.mozilla.org/security/advisories/mfsa2019-38/

Parent vulnerabilities

(Appears in the following advisories)

• MFSA2019-38
• MFSA2019-37
• MFSA2019-36

Peer vulnerabilities

(Found alongside the following vulnerabilities)

• CVE-2019-17008
• CVE-2019-13722
• CVE-2019-11745
• CVE-2019-17009
• CVE-2019-17010
• CVE-2019-17005
• CVE-2019-17011
• CVE-2019-17012
• CVE-2019-11756
• CVE-2019-17014
• CVE-2019-17013

Frequently Asked Questions

• What is the vulnerability ID for this security issue?

  The vulnerability ID for this security issue is CVE-2019-17009.

• What is the severity level of CVE-2019-17009?

  The severity level of CVE-2019-17009 is high.

• Which operating systems are affected by CVE-2019-17009?

  Only Windows operating systems are affected by CVE-2019-17009.

• Which software products are affected by CVE-2019-17009?

  Mozilla Firefox ESR, Mozilla Thunderbird, and Mozilla Firefox versions up to 71.0 are affected by CVE-2019-17009.

• How can this vulnerability be exploited?

  This vulnerability can be exploited by an unprivileged process with local system access locating and exploiting a vulnerability in file handling in the updater service.