First published: Tue Mar 19 2019(Updated: )
Cross-origin images can be read in violation of the same-origin policy by exporting an image after using createImageBitmap to read the image and then rendering the resulting bitmap image within a canvas element. This vulnerability affects Firefox < 66.
Credit: security@mozilla.org security@mozilla.org
Affected Software | Affected Version | How to fix |
---|---|---|
Mozilla Thunderbird | <60.7 | 60.7 |
Mozilla Firefox ESR | <60.7 | 60.7 |
Mozilla Firefox | <66 | 66 |
Mozilla Firefox | <66.0 | |
ubuntu/firefox | <66.0+ | 66.0+ |
ubuntu/firefox | <66.0+ | 66.0+ |
ubuntu/firefox | <66.0+ | 66.0+ |
ubuntu/firefox | <66.0+ | 66.0+ |
ubuntu/firefox | <66.0+ | 66.0+ |
ubuntu/firefox | <66.0+ | 66.0+ |
ubuntu/firefox | <66.0+ | 66.0+ |
ubuntu/firefox | <66.0+ | 66.0+ |
ubuntu/firefox | <66.0+ | 66.0+ |
ubuntu/firefox | <66.0+ | 66.0+ |
ubuntu/firefox | <66.0+ | 66.0+ |
ubuntu/firefox | <66.0+ | 66.0+ |
ubuntu/firefox | <66.0+ | 66.0+ |
ubuntu/firefox | <66.0.1+ | 66.0.1+ |
ubuntu/firefox | <66.0 | 66.0 |
ubuntu/firefox | <66.0+ | 66.0+ |
ubuntu/thunderbird | <1:60.7.0+ | 1:60.7.0+ |
ubuntu/thunderbird | <1:60.7.0+ | 1:60.7.0+ |
ubuntu/thunderbird | <1:60.7.0+ | 1:60.7.0+ |
ubuntu/thunderbird | <1:60.7.0+ | 1:60.7.0+ |
ubuntu/thunderbird | <1:60.7.0+ | 1:60.7.0+ |
ubuntu/thunderbird | <1:60.7.0+ | 1:60.7.0+ |
ubuntu/thunderbird | <1:60.7.0+ | 1:60.7.0+ |
ubuntu/thunderbird | <1:60.7.0+ | 1:60.7.0+ |
ubuntu/thunderbird | <1:60.7.0+ | 1:60.7.0+ |
ubuntu/thunderbird | <1:60.7.0+ | 1:60.7.0+ |
ubuntu/thunderbird | <1:60.7.0+ | 1:60.7.0+ |
ubuntu/thunderbird | <1:60.7.0+ | 1:60.7.0+ |
ubuntu/thunderbird | <1:60.7.0+ | 1:60.7.0+ |
ubuntu/thunderbird | <60.7 | 60.7 |
ubuntu/thunderbird | <1:60.7.0+ | 1:60.7.0+ |
debian/firefox | 125.0.3-1 | |
debian/firefox-esr | 91.12.0esr-1~deb10u1 115.10.0esr-1~deb10u1 115.7.0esr-1~deb11u1 115.10.0esr-1~deb11u1 115.7.0esr-1~deb12u1 115.10.0esr-1~deb12u1 115.10.0esr-1 | |
debian/thunderbird | 1:91.12.0-1~deb10u1 1:115.10.1-1~deb10u1 1:115.7.0-1~deb11u1 1:115.10.1-1~deb11u1 1:115.7.0-1~deb12u1 1:115.10.1-1~deb12u1 1:115.10.1-1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
(Appears in the following advisories)
(Found alongside the following vulnerabilities)
CVE-2019-9797 is a vulnerability that allows cross-origin images to be read in violation of the same-origin policy.
This vulnerability affects Firefox versions prior to version 66.
CVE-2019-9797 has a severity level of 5.3, which is considered high.
To fix CVE-2019-9797, update your Firefox browser to version 66 or newer.
You can find more information about CVE-2019-9797 on the Mozilla website and Bugzilla.