The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
A vulnerability was discovered where specific command line arguments are not properly discarded during Firefox invocation as a shell handler for URLs. This could be used to retrieve and execute files whose location is supplied through these command line arguments if Firefox is configured as the default URI handler for a given URI scheme in third party applications and these applications insufficiently sanitize URL data. *Note: This issue only affects Windows operating systems. Other operating systems are unaffected.*. This vulnerability affects Thunderbird < 60.6, Firefox ESR < 60.6, and Firefox < 66.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade firefox-esr | Aug 22, 2024 | Apr 26, 2019 |
| Freebsd | — | Upgrade linux-seamonkeyUpgrade seamonkeyUpgrade firefoxUpgrade thunderbirdUpgrade libxulUpgrade linux-firefoxUpgrade waterfoxUpgrade firefox-esrUpgrade linux-thunderbird | Mar 20, 2019 | Mar 19, 2019 |
| Mfsa2019 07 | — | Upgrade to Mozilla Firefox version 66.0Upgrade to the latest version of Mozilla Firefox | Mar 20, 2019 | Mar 19, 2019 |
| Mfsa2019 08 | — | Upgrade to the latest version of Mozilla FirefoxUpgrade to Mozilla Firefox ESR version 60.6 | Mar 20, 2019 | Mar 19, 2019 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 60.6Upgrade to the latest version of Mozilla Thunderbird | Mar 26, 2019 | Mar 19, 2019 |
| Oracle Solaris | — | Upgrade mail/thunderbird/plugin/thunderbird-lightning to version 60.6.1-11.4.9.0.1.2.0 on Solaris 11.4Upgrade web/data/firefox-bookmarks to version 60.6.0-11.4.8.0.1.3.0 on Solaris 11.4Upgrade mail/thunderbird to version 60.6.1-11.4.9.0.1.2.0 on Solaris 11.4Upgrade web/browser/firefox to version 60.6.0-11.4.8.0.1.3.0 on Solaris 11.4 | Apr 17, 2019 | Apr 17, 2019 |
| Suse | — | Upgrade MozillaThunderbird-translations-commonUpgrade mozillafirefox-branding-upstreamUpgrade mozillafirefox-buildsymbolsUpgrade MozillaThunderbird-buildsymbolsUpgrade MozillaFirefoxUpgrade MozillaFirefox-translations-commonUpgrade MozillaThunderbirdUpgrade MozillaFirefox-develUpgrade MozillaFirefox-translations-otherUpgrade MozillaThunderbird-translations-other | Apr 1, 2019 | Mar 19, 2019 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub