CVE-2019-11730
Medium · 6.5CVSS
6.5
EPSS
20.3%
Published
Jul 23, 2019
CISA due date
—
The record
A vulnerability exists where if a user opens a locally saved HTML file, this file can use file: URIs to access other files in the same directory or sub-directories if the names are known or guessed. The Fetch API can then be used to read the contents of any files stored in these directories and they may uploaded to a server. It was demonstrated that in combination with a popular Android messaging app, if a malicious HTML attachment is sent to a user and they opened that attachment in Firefox, due to that app's predictable pattern for locally-saved file names, it is possible to read attachments the victim received from other correspondents. This vulnerability affects Firefox ESR < 60.8, Firefox < 68, and Thunderbird < 60.8.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:10 | firefox-esr | 0 | 60.8.0esr-1~deb10u1 |
| Debian:10 | thunderbird | 0 | 1:60.8.0-1~deb10u1 |
| Debian:11 | firefox-esr | 0 | 60.8.0esr-1 |
| Debian:11 | thunderbird | 0 | 1:60.8.0-1 |
| Debian:12 | firefox-esr | 0 | 60.8.0esr-1 |
| Debian:12 | thunderbird | 0 | 1:60.8.0-1 |
| Debian:13 | firefox-esr | 0 | 60.8.0esr-1 |
| Debian:13 | thunderbird | 0 | 1:60.8.0-1 |
| Debian:8 | firefox-esr | 0 | 60.8.0esr-1~deb8u1 |
| Debian:8 | thunderbird | 0 | 1:60.8.0-1~deb8u1 |
| Debian:9 | firefox-esr | 0 | 60.8.0esr-1~deb9u1 |
| Debian:9 | thunderbird | 0 | 1:60.8.0-1~deb9u1 |
| Mageia:6 | firefox | 0 | 60.8.0-1.mga6 |
| Mageia:6 | firefox-l10n | 0 | 60.8.0-1.mga6 |
| Mageia:6 | nss | 0 | 3.36.8-1.1.mga6 |
| Mageia:6 | rootcerts | 0 | 20190604.00-1.mga6 |
| Mageia:6 | thunderbird | 0 | 60.8.0-1.1.mga6 |
| Mageia:6 | thunderbird-l10n | 0 | 60.8.0-1.mga6 |
| Mageia:7 | firefox | 0 | 68.0-1.1.mga7 |
| Mageia:7 | firefox-l10n | 0 | 68.0-1.mga7 |
| Mageia:7 | nss | 0 | 3.45.0-1.mga7 |
| Mageia:7 | rootcerts | 0 | 20190604.00-1.mga7 |
| Mageia:7 | thunderbird | 0 | 60.8.0-1.1.mga7 |
| Mageia:7 | thunderbird | 0 | 68.0-1.3.mga7 |
| Mageia:7 | thunderbird-l10n | 0 | 60.8.0-1.mga7 |
| Mageia:7 | thunderbird-l10n | 0 | 68.0-1.mga7 |
| Red Hat:enterprise_linux:6::client | firefox | 0 | 0:60.8.0-1.el6_10 |
| Red Hat:enterprise_linux:6::client | firefox-debuginfo | 0 | 0:60.8.0-1.el6_10 |
| Red Hat:enterprise_linux:6::client | thunderbird | 0 | 0:60.8.0-1.el6_10 |
| Red Hat:enterprise_linux:6::client | thunderbird-debuginfo | 0 | 0:60.8.0-1.el6_10 |
| Red Hat:enterprise_linux:6::computenode | firefox | 0 | 0:60.8.0-1.el6_10 |
| Red Hat:enterprise_linux:6::computenode | firefox-debuginfo | 0 | 0:60.8.0-1.el6_10 |
| Red Hat:enterprise_linux:6::server | firefox | 0 | 0:60.8.0-1.el6_10 |
| Red Hat:enterprise_linux:6::server | firefox-debuginfo | 0 | 0:60.8.0-1.el6_10 |
| Red Hat:enterprise_linux:6::server | thunderbird | 0 | 0:60.8.0-1.el6_10 |
| Red Hat:enterprise_linux:6::server | thunderbird-debuginfo | 0 | 0:60.8.0-1.el6_10 |
| Red Hat:enterprise_linux:6::workstation | firefox | 0 | 0:60.8.0-1.el6_10 |
| Red Hat:enterprise_linux:6::workstation | firefox-debuginfo | 0 | 0:60.8.0-1.el6_10 |
| Red Hat:enterprise_linux:6::workstation | thunderbird | 0 | 0:60.8.0-1.el6_10 |
| Red Hat:enterprise_linux:6::workstation | thunderbird-debuginfo | 0 | 0:60.8.0-1.el6_10 |
| Red Hat:enterprise_linux:7::client | firefox | 0 | 0:60.8.0-1.el7_6 |
| Red Hat:enterprise_linux:7::client | firefox-debuginfo | 0 | 0:60.8.0-1.el7_6 |
| Red Hat:enterprise_linux:7::client | thunderbird | 0 | 0:60.8.0-1.el7_6 |
| Red Hat:enterprise_linux:7::client | thunderbird-debuginfo | 0 | 0:60.8.0-1.el7_6 |
| Red Hat:enterprise_linux:7::server | firefox | 0 | 0:60.8.0-1.el7_6 |
| Red Hat:enterprise_linux:7::server | firefox-debuginfo | 0 | 0:60.8.0-1.el7_6 |
| Red Hat:enterprise_linux:7::server | thunderbird | 0 | 0:60.8.0-1.el7_6 |
| Red Hat:enterprise_linux:7::server | thunderbird-debuginfo | 0 | 0:60.8.0-1.el7_6 |
| Red Hat:enterprise_linux:7::workstation | firefox | 0 | 0:60.8.0-1.el7_6 |
| Red Hat:enterprise_linux:7::workstation | firefox-debuginfo | 0 | 0:60.8.0-1.el7_6 |
| Red Hat:enterprise_linux:7::workstation | thunderbird | 0 | 0:60.8.0-1.el7_6 |
| Red Hat:enterprise_linux:7::workstation | thunderbird-debuginfo | 0 | 0:60.8.0-1.el7_6 |
| Red Hat:enterprise_linux:8::appstream | firefox | 0 | 0:60.8.0-1.el8_0 |
| Red Hat:enterprise_linux:8::appstream | firefox-debuginfo | 0 | 0:60.8.0-1.el8_0 |
| Red Hat:enterprise_linux:8::appstream | firefox-debugsource | 0 | 0:60.8.0-1.el8_0 |
| Red Hat:enterprise_linux:8::appstream | thunderbird | 0 | 0:60.8.0-1.el8_0 |
| Red Hat:enterprise_linux:8::appstream | thunderbird-debuginfo | 0 | 0:60.8.0-1.el8_0 |
| Red Hat:enterprise_linux:8::appstream | thunderbird-debugsource | 0 | 0:60.8.0-1.el8_0 |
| SUSE:Enterprise Storage 4 | MozillaFirefox | 0 | 68.1.0-109.89.1 |
| SUSE:Enterprise Storage 4 | MozillaFirefox | 0 | 60.8.0-109.83.3 |
| SUSE:Enterprise Storage 4 | MozillaFirefox-branding-SLE | 0 | 68-32.8.1 |
| SUSE:Enterprise Storage 4 | mozilla-nss | 0 | 3.44.1-58.28.1 |
| SUSE:Enterprise Storage 5 | MozillaFirefox | 0 | 68.1.0-109.89.1 |
| SUSE:Enterprise Storage 5 | MozillaFirefox | 0 | 60.8.0-109.83.3 |
| SUSE:Enterprise Storage 5 | MozillaFirefox-branding-SLE | 0 | 68-32.8.1 |
| SUSE:Enterprise Storage 5 | mozilla-nss | 0 | 3.44.1-58.28.1 |
| SUSE:HPE Helion OpenStack 8 | MozillaFirefox | 0 | 68.1.0-109.89.1 |
| SUSE:HPE Helion OpenStack 8 | MozillaFirefox | 0 | 60.8.0-109.83.3 |
| SUSE:HPE Helion OpenStack 8 | MozillaFirefox-branding-SLE | 0 | 68-32.8.1 |
| SUSE:HPE Helion OpenStack 8 | mozilla-nss | 0 | 3.44.1-58.28.1 |
| SUSE:Linux Enterprise Desktop 12 SP4 | MozillaFirefox | 0 | 68.1.0-109.89.1 |
| SUSE:Linux Enterprise Desktop 12 SP4 | MozillaFirefox | 0 | 60.8.0-109.83.3 |
| SUSE:Linux Enterprise Desktop 12 SP4 | MozillaFirefox-branding-SLE | 0 | 68-32.8.1 |
| SUSE:Linux Enterprise Desktop 12 SP4 | mozilla-nss | 0 | 3.44.1-58.28.1 |
| SUSE:Linux Enterprise Module for Basesystem 15 | mozilla-nss | 0 | 3.44.1-3.16.2 |
| SUSE:Linux Enterprise Module for Basesystem 15 SP1 | mozilla-nss | 0 | 3.44.1-3.16.2 |
| SUSE:Linux Enterprise Module for Desktop Applications 15 | MozillaFirefox | 0 | 60.8.0-3.51.4 |
| SUSE:Linux Enterprise Module for Desktop Applications 15 SP1 | MozillaFirefox | 0 | 60.8.0-3.51.4 |
| SUSE:Linux Enterprise Module for Server Applications 15 SP1 | mozilla-nss | 0 | 3.44.1-3.16.2 |
| SUSE:Linux Enterprise Server 11 SP4-LTSS | MozillaFirefox | 0 | 60.8.0esr-78.43.2 |
| SUSE:Linux Enterprise Server 11 SP4-LTSS | MozillaFirefox | 0 | 68.2.0-78.51.4 |
| SUSE:Linux Enterprise Server 11 SP4-LTSS | MozillaFirefox-branding-SLED | 0 | 68-21.9.8 |
| SUSE:Linux Enterprise Server 11 SP4-LTSS | firefox-atk | 0 | 2.26.1-2.8.4 |
| SUSE:Linux Enterprise Server 11 SP4-LTSS | firefox-cairo | 0 | 1.15.10-2.13.4 |
| SUSE:Linux Enterprise Server 11 SP4-LTSS | firefox-gdk-pixbuf | 0 | 2.36.11-2.8.4 |
| SUSE:Linux Enterprise Server 11 SP4-LTSS | firefox-glib2 | 0 | 2.54.3-2.14.7 |
| SUSE:Linux Enterprise Server 11 SP4-LTSS | firefox-gtk3 | 0 | 3.10.9-2.15.3 |
| SUSE:Linux Enterprise Server 11 SP4-LTSS | firefox-harfbuzz | 0 | 1.7.5-2.7.4 |
| SUSE:Linux Enterprise Server 11 SP4-LTSS | firefox-libffi | 0 | 3.2.1.git259-2.3.3 |
| SUSE:Linux Enterprise Server 11 SP4-LTSS | firefox-libffi-gcc5 | 0 | 5.3.1+r233831-14.1 |
| SUSE:Linux Enterprise Server 11 SP4-LTSS | firefox-pango | 0 | 1.40.14-2.7.4 |
| SUSE:Linux Enterprise Server 11 SP4-LTSS | mozilla-nspr | 0 | 4.21-29.6.1 |
| SUSE:Linux Enterprise Server 11 SP4-LTSS | mozilla-nss | 0 | 3.45-38.9.3 |
| SUSE:Linux Enterprise Server 12 SP1-LTSS | MozillaFirefox | 0 | 68.1.0-109.89.1 |
| SUSE:Linux Enterprise Server 12 SP1-LTSS | MozillaFirefox | 0 | 60.8.0-109.83.3 |
| SUSE:Linux Enterprise Server 12 SP1-LTSS | MozillaFirefox-branding-SLE | 0 | 68-32.8.1 |
| SUSE:Linux Enterprise Server 12 SP1-LTSS | mozilla-nss | 0 | 3.44.1-58.28.1 |
| SUSE:Linux Enterprise Server 12 SP2-BCL | MozillaFirefox | 0 | 68.1.0-109.89.1 |
| SUSE:Linux Enterprise Server 12 SP2-BCL | MozillaFirefox | 0 | 60.8.0-109.83.3 |
| SUSE:Linux Enterprise Server 12 SP2-BCL | MozillaFirefox-branding-SLE | 0 | 68-32.8.1 |
| SUSE:Linux Enterprise Server 12 SP2-BCL | mozilla-nss | 0 | 3.44.1-58.28.1 |
| SUSE:Linux Enterprise Server 12 SP2-LTSS | MozillaFirefox | 0 | 68.1.0-109.89.1 |
| SUSE:Linux Enterprise Server 12 SP2-LTSS | MozillaFirefox | 0 | 60.8.0-109.83.3 |
| SUSE:Linux Enterprise Server 12 SP2-LTSS | MozillaFirefox-branding-SLE | 0 | 68-32.8.1 |
| SUSE:Linux Enterprise Server 12 SP2-LTSS | mozilla-nss | 0 | 3.44.1-58.28.1 |
| SUSE:Linux Enterprise Server 12 SP3-BCL | MozillaFirefox | 0 | 68.1.0-109.89.1 |
| SUSE:Linux Enterprise Server 12 SP3-BCL | MozillaFirefox | 0 | 60.8.0-109.83.3 |
| SUSE:Linux Enterprise Server 12 SP3-BCL | MozillaFirefox-branding-SLE | 0 | 68-32.8.1 |
| SUSE:Linux Enterprise Server 12 SP3-BCL | mozilla-nss | 0 | 3.44.1-58.28.1 |
| SUSE:Linux Enterprise Server 12 SP3-LTSS | MozillaFirefox | 0 | 68.1.0-109.89.1 |
| SUSE:Linux Enterprise Server 12 SP3-LTSS | MozillaFirefox | 0 | 60.8.0-109.83.3 |
| SUSE:Linux Enterprise Server 12 SP3-LTSS | MozillaFirefox-branding-SLE | 0 | 68-32.8.1 |
| SUSE:Linux Enterprise Server 12 SP3-LTSS | mozilla-nss | 0 | 3.44.1-58.28.1 |
| SUSE:Linux Enterprise Server 12 SP4 | MozillaFirefox | 0 | 68.1.0-109.89.1 |
| SUSE:Linux Enterprise Server 12 SP4 | MozillaFirefox | 0 | 60.8.0-109.83.3 |
| SUSE:Linux Enterprise Server 12 SP4 | MozillaFirefox-branding-SLE | 0 | 68-32.8.1 |
| SUSE:Linux Enterprise Server 12 SP4 | mozilla-nss | 0 | 3.44.1-58.28.1 |
| SUSE:Linux Enterprise Server 12 SP5 | MozillaFirefox | 0 | 68.1.0-109.89.1 |
| SUSE:Linux Enterprise Server 12 SP5 | MozillaFirefox-branding-SLE | 0 | 68-32.8.1 |
| SUSE:Linux Enterprise Server for SAP Applications 12 SP1 | MozillaFirefox | 0 | 68.1.0-109.89.1 |
| SUSE:Linux Enterprise Server for SAP Applications 12 SP1 | MozillaFirefox | 0 | 60.8.0-109.83.3 |
| SUSE:Linux Enterprise Server for SAP Applications 12 SP1 | MozillaFirefox-branding-SLE | 0 | 68-32.8.1 |
| SUSE:Linux Enterprise Server for SAP Applications 12 SP1 | mozilla-nss | 0 | 3.44.1-58.28.1 |
| SUSE:Linux Enterprise Server for SAP Applications 12 SP2 | MozillaFirefox | 0 | 68.1.0-109.89.1 |
| SUSE:Linux Enterprise Server for SAP Applications 12 SP2 | MozillaFirefox | 0 | 60.8.0-109.83.3 |
| SUSE:Linux Enterprise Server for SAP Applications 12 SP2 | MozillaFirefox-branding-SLE | 0 | 68-32.8.1 |
| SUSE:Linux Enterprise Server for SAP Applications 12 SP2 | mozilla-nss | 0 | 3.44.1-58.28.1 |
| SUSE:Linux Enterprise Server for SAP Applications 12 SP3 | MozillaFirefox | 0 | 68.1.0-109.89.1 |
| SUSE:Linux Enterprise Server for SAP Applications 12 SP3 | MozillaFirefox | 0 | 60.8.0-109.83.3 |
| SUSE:Linux Enterprise Server for SAP Applications 12 SP3 | MozillaFirefox-branding-SLE | 0 | 68-32.8.1 |
| SUSE:Linux Enterprise Server for SAP Applications 12 SP3 | mozilla-nss | 0 | 3.44.1-58.28.1 |
| SUSE:Linux Enterprise Server for SAP Applications 12 SP4 | MozillaFirefox | 0 | 68.1.0-109.89.1 |
| SUSE:Linux Enterprise Server for SAP Applications 12 SP4 | MozillaFirefox | 0 | 60.8.0-109.83.3 |
| SUSE:Linux Enterprise Server for SAP Applications 12 SP4 | MozillaFirefox-branding-SLE | 0 | 68-32.8.1 |
| SUSE:Linux Enterprise Server for SAP Applications 12 SP4 | mozilla-nss | 0 | 3.44.1-58.28.1 |
| SUSE:Linux Enterprise Server for SAP Applications 12 SP5 | MozillaFirefox | 0 | 68.1.0-109.89.1 |
| SUSE:Linux Enterprise Server for SAP Applications 12 SP5 | MozillaFirefox-branding-SLE | 0 | 68-32.8.1 |
| SUSE:Linux Enterprise Software Development Kit 12 SP4 | MozillaFirefox | 0 | 68.1.0-109.89.1 |
| SUSE:Linux Enterprise Software Development Kit 12 SP4 | MozillaFirefox | 0 | 60.8.0-109.83.3 |
| SUSE:Linux Enterprise Software Development Kit 12 SP4 | mozilla-nss | 0 | 3.44.1-58.28.1 |
| SUSE:Linux Enterprise Software Development Kit 12 SP5 | MozillaFirefox | 0 | 68.1.0-109.89.1 |
| SUSE:Linux Enterprise Workstation Extension 15 | MozillaThunderbird | 0 | 68.1.1-3.51.1 |
| SUSE:Linux Enterprise Workstation Extension 15 | MozillaThunderbird | 0 | 60.8.0-3.46.2 |
| SUSE:Linux Enterprise Workstation Extension 15 SP1 | MozillaThunderbird | 0 | 68.1.1-3.51.1 |
| SUSE:Linux Enterprise Workstation Extension 15 SP1 | MozillaThunderbird | 0 | 60.8.0-3.46.2 |
| SUSE:OpenStack Cloud 7 | MozillaFirefox | 0 | 68.1.0-109.89.1 |
| SUSE:OpenStack Cloud 7 | MozillaFirefox | 0 | 60.8.0-109.83.3 |
| SUSE:OpenStack Cloud 7 | MozillaFirefox-branding-SLE | 0 | 68-32.8.1 |
| SUSE:OpenStack Cloud 7 | mozilla-nss | 0 | 3.44.1-58.28.1 |
| SUSE:OpenStack Cloud 8 | MozillaFirefox | 0 | 68.1.0-109.89.1 |
| SUSE:OpenStack Cloud 8 | MozillaFirefox | 0 | 60.8.0-109.83.3 |
| SUSE:OpenStack Cloud 8 | MozillaFirefox-branding-SLE | 0 | 68-32.8.1 |
| SUSE:OpenStack Cloud 8 | mozilla-nss | 0 | 3.44.1-58.28.1 |
| SUSE:OpenStack Cloud Crowbar 8 | MozillaFirefox | 0 | 68.1.0-109.89.1 |
| SUSE:OpenStack Cloud Crowbar 8 | MozillaFirefox | 0 | 60.8.0-109.83.3 |
| SUSE:OpenStack Cloud Crowbar 8 | MozillaFirefox-branding-SLE | 0 | 68-32.8.1 |
| SUSE:OpenStack Cloud Crowbar 8 | mozilla-nss | 0 | 3.44.1-58.28.1 |
| SUSE:Package Hub 12 | MozillaThunderbird | 0 | 60.8.0-88.1 |
| Ubuntu:16.04:LTS | firefox | 0 | 68.0+build3-0ubuntu0.16.04.1 |
| Ubuntu:16.04:LTS | thunderbird | 0 | 1:60.8.0+build1-0ubuntu0.16.04.2 |
| Ubuntu:18.04:LTS | firefox | 0 | 68.0+build3-0ubuntu0.18.04.1 |
| Ubuntu:18.04:LTS | mozjs38 | 0 | No fix |
| Ubuntu:18.04:LTS | mozjs52 | 0 | No fix |
| Ubuntu:18.04:LTS | thunderbird | 0 | 1:60.8.0+build1-0ubuntu0.18.04.1 |
| Ubuntu:20.04:LTS | mozjs52 | 0 | No fix |
| Ubuntu:Pro:18.04:LTS | mozjs38 | 0 | No fix |
| Ubuntu:Pro:18.04:LTS | mozjs52 | 0 | No fix |
| Ubuntu:Pro:20.04:LTS | mozjs52 | 0 | No fix |
| openSUSE:Leap 15.0 | MozillaThunderbird | 0 | 68.1.1-lp150.3.51.1 |
| openSUSE:Leap 15.0 | MozillaThunderbird | 0 | 60.8.0-lp151.2.10.1 |
| openSUSE:Leap 15.0 | enigmail | 0 | 2.1.2-lp150.34.1 |
| openSUSE:Leap 15.0 | mozilla-nss | 0 | 3.44.1-lp150.2.24.1 |
| openSUSE:Leap 15.1 | MozillaFirefox | 0 | 60.8.0-lp151.2.10.1 |
| openSUSE:Leap 15.1 | MozillaThunderbird | 0 | 68.1.1-lp151.2.13.1 |
| openSUSE:Leap 15.1 | MozillaThunderbird | 0 | 60.8.0-lp151.2.10.1 |
| openSUSE:Leap 15.1 | enigmail | 0 | 2.1.2-lp151.2.6.1 |
| openSUSE:Leap 15.1 | mozilla-nss | 0 | 3.44.1-lp151.2.3.1 |
| openSUSE:Tumbleweed | MozillaFirefox | 0 | 92.0-1.2 |
| openSUSE:Tumbleweed | MozillaThunderbird | 0 | 91.1.1-1.1 |
| openSUSE:Tumbleweed | firefox-esr | 0 | 128.5.1-1.1 |
Related vulnerabilities
- CVE-2024-5696 By manipulating the text in an `input` tag, an attacker could have caused corrupt memory… Also affects firefox-esr
- CVE-2024-5700 Memory safety bugs present in Firefox 126, Firefox ESR 115.11, and Thunderbird 115.11. Also affects firefox-esr
- CVE-2024-5702 Memory corruption in the networking stack could have led to a potentially exploitable… Also affects firefox-esr
- CVE-2024-5693 Offscreen Canvas did not properly track cross-origin tainting, which could be used to… Also affects firefox-esr
- CVE-2024-5688 If a garbage collection was triggered at the right time, a use-after-free could have… Also affects firefox-esr
- CVE-2024-5691 By tricking the browser with a `X-Frame-Options` header, a sandboxed iframe could have… Also affects firefox-esr
- CVE-2024-5690 By monitoring the time certain operations take, an attacker could have guessed which… Also affects firefox-esr
- CVE-2024-4777 Memory safety bugs present in Firefox 125, Firefox ESR 115.10, and Thunderbird 115.10. Also affects firefox-esr