CVE-2019-9808
First published: Tue Mar 19 2019(Updated: )
If WebRTC permission is requested from documents with data: or blob: URLs, the permission notifications do not properly display the originating domain. The notification states "Unknown origin" as the requestee, leading to user confusion about which site is asking for this permission.
Credit: security@mozilla.org security@mozilla.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Mozilla Firefox | <66 | 66 |
| Mozilla Firefox | <66.0 | |
| debian/firefox | 132.0.2-1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://bugzilla.mozilla.org/show_bug.cgi?id=1434634
- https://www.mozilla.org/security/advisories/mfsa2019-07/
- https://launchpad.net/bugs/cve/CVE-2019-9808
- https://www.mozilla.org/en-US/security/advisories/mfsa2019-07/
- https://www.mozilla.org/en-US/security/advisories/mfsa2019-07/#CVE-2019-9788
- https://www.mozilla.org/en-US/security/advisories/mfsa2019-07/#CVE-2019-9808
- https://security-tracker.debian.org/tracker/CVE-2019-9808
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9808
- https://nvd.nist.gov/vuln/detail/CVE-2019-9808
- https://ubuntu.com/security/CVE-2019-9808
Peer vulnerabilities
(Found alongside the following vulnerabilities)
Frequently Asked Questions
What is the severity of CVE-2019-9808?
The severity of CVE-2019-9808 is medium with a severity value of 5.3.
How does CVE-2019-9808 affect Mozilla Firefox?
CVE-2019-9808 affects Mozilla Firefox versions up to and including 66.0, and it may cause confusion for users when displaying the originating domain for WebRTC permission notifications.
Which websites provide more information about CVE-2019-9808?
You can find more information about CVE-2019-9808 on Bugzilla and the Mozilla security advisories page.
What is the Common Weakness Enumeration (CWE) for CVE-2019-9808?
The CWE for CVE-2019-9808 is CWE-346.
How can I fix the vulnerability CVE-2019-9808?
To fix CVE-2019-9808, update Mozilla Firefox to version 66.0.1 or higher.
- agent/type
- agent/first-publish-date
- collector/launchpad-cve
- source/Launchpad
- agent/author
- agent/weakness
- agent/severity
- agent/description
- collector/mozilla-advisory
- agent/software-canonical-lookup-request
- source/Mozilla
- agent/software-canonical-lookup
- collector/nvd-cve
- source/NVD
- collector/nvd-index
- agent/references
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/tags
- agent/event
- collector/security-tracker-debian
- source/Debian
- agent/softwarecombine
- collector/usn-cve
- source/Ubuntu
- vendor/mozilla
- canonical/mozilla firefox
- package-manager/debian