CVE-2019-17019

Reference Links

• https://bugzilla.mozilla.org/show_bug.cgi?id=1568003
• https://www.mozilla.org/security/advisories/mfsa2020-01/
• https://www.mozilla.org/en-US/security/advisories/mfsa2020-01/

Parent vulnerabilities

(Appears in the following advisories)

• MFSA2020-01

Peer vulnerabilities

(Found alongside the following vulnerabilities)

• CVE-2019-17015
• CVE-2019-17016
• CVE-2019-17017
• CVE-2019-17018
• CVE-2019-17019
• CVE-2019-17020
• CVE-2019-17021
• CVE-2019-17022
• CVE-2019-17023
• CVE-2019-17024
• CVE-2019-17025

Frequently Asked Questions

• What is CVE-2019-17019?

  CVE-2019-17019 is a vulnerability where a python file being served with the MIME type of text/plain could be executed by Python instead of being opened as a text file when the Open option was selected upon download.

• What is the severity of CVE-2019-17019?

  The severity of CVE-2019-17019 is high with a CVSS score of 8.8.

• Which operating systems are affected by CVE-2019-17019?

  This vulnerability only occurs on Windows, other operating systems are unaffected.

• How can I mitigate CVE-2019-17019?

  To mitigate CVE-2019-17019, ensure that the python file being served has the correct MIME type set and perform proper file validation.

• Is the Firefox browser affected by CVE-2019-17019?

  Yes, the vulnerability affects Mozilla Firefox versions up to but not including 72.0.