7.5high
CVE-2019-9802
If a Sandbox content process is compromised, it can initiate an FTP download which will then use a child process to render the downloaded d…
Published 7 y ago · modified 4 mo ago · JSON
CVSS
7.5
v3.0 · NVD
CISA KEV
No
not known exploited
EPSS
1.1%
percentile 66%
Public exploits
0
none known
Summary
If a Sandbox content process is compromised, it can initiate an FTP download which will then use a child process to render the downloaded data. The downloaded data can then be passed to the Chrome process with an arbitrary file length supplied by an attacker, bypassing sandbox protections and allow for a potential memory read of adjacent data from the privileged Chrome process, which may include sensitive data. This vulnerability affects Firefox < 66.
Exploit prediction (EPSS)
1.13% probability of exploitation in the next 30 days, higher than 66% of all scored CVEs.
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| NVD | 3.0 | 7.5 | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
| NVD | 2.0 | 5.0 | AV:N/AC:L/Au:N/C:P/I:N/A:N |
Affected products
- Mozilla Firefox
Classification
- Weakness
- CWE-125 Out-of-bounds Read
References
- mozilla.org /security/advisories/mfsa2019-07/ · x_refsource_MISC, x_transferred
- bugzilla.mozilla.org /show_bug.cgi?id=1415508 · x_refsource_MISC, x_transferred
Sources
- CVE List: CVE-2019-9802
- NVD: CVE-2019-9802
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.