CVE-2019-9797: Medium severity Mozilla Thunderbird vulnerability
Cross-origin images can be read in violation of the same-origin policy by exporting an image after using createImageBitmap to read the image and then rendering the resulting bitmap image within a canvas element.
External Reference:
https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9797
Other sources
Cross-origin images can be read in violation of the same-origin policy by exporting an image after using createImageBitmap to read the image and then rendering the resulting bitmap image within a canvas element.
— Mozilla
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Thunderbirdto a version that resolves this vulnerability.Fixed in 60.7 - Upgrade
Upgrade
Firefoxto a version that resolves this vulnerability.Fixed in 66 - Upgrade
Upgrade
Firefox ESRto a version that resolves this vulnerability.Fixed in 60.7 - Upgrade
Upgrade
debian/firefoxto a version that resolves this vulnerability.Fixed in 154.0.1-1 - Upgrade
Upgrade
debian/firefox-esrto a version that resolves this vulnerability.Fixed in 140.12.0esr-1~deb12u1Fixed in 140.14.0esr-1~deb12u1Fixed in 140.12.0esr-1~deb13u1Fixed in 140.14.0esr-1~deb13u1Fixed in 140.14.0esr-2 - Upgrade
Upgrade
debian/thunderbirdto a version that resolves this vulnerability.Fixed in 1:140.12.0esr-1~deb12u1Fixed in 1:140.14.0esr-1~deb12u1Fixed in 1:140.12.0esr-1~deb13u1Fixed in 1:140.14.0esr-1~deb13u1Fixed in 1:140.14.0esr-1 - Upgrade
Upgrade
firefoxto a version that resolves this vulnerability.Fixed in 66
Event History
Parent advisories
This vulnerability appears in the following advisories.
Peer vulnerabilities
Found alongside the following vulnerabilities.
- CVE-2019-9815
- CVE-2019-9816
- CVE-2019-9817
- CVE-2019-9818
- CVE-2019-9819
- CVE-2019-9820
- CVE-2019-11691
- CVE-2019-11692
- CVE-2019-11693
- CVE-2019-7317
- CVE-2019-9797
- CVE-2018-18511
- CVE-2019-11694
- CVE-2019-11698
- CVE-2019-5798
- CVE-2019-9800
- CVE-2019-9790
- CVE-2019-9791
- CVE-2019-9792
- CVE-2019-9793
- CVE-2019-9794
- CVE-2019-9795
- CVE-2019-9796
- CVE-2019-9798
- CVE-2019-9799
- CVE-2019-9801
- CVE-2019-9802
- CVE-2019-9803
- CVE-2019-9804
- CVE-2019-9805
- CVE-2019-9806
- CVE-2019-9807
- CVE-2019-9809
- CVE-2019-9808
- CVE-2019-9789
- CVE-2019-9788
Frequently Asked Questions
What is CVE-2019-9797?
CVE-2019-9797 is a vulnerability that allows cross-origin images to be read in violation of the same-origin policy.
Which browsers are affected by CVE-2019-9797?
This vulnerability affects Firefox versions prior to version 66.
How severe is CVE-2019-9797?
CVE-2019-9797 has a severity level of 5.3, which is considered high.
How can I fix CVE-2019-9797?
To fix CVE-2019-9797, update your Firefox browser to version 66 or newer.
Where can I find more information about CVE-2019-9797?
You can find more information about CVE-2019-9797 on the Mozilla website and Bugzilla.