CVE:CVE-2019-11717
CNNVD:CNNVD-201907-507
Mozilla Firefox ESR是美国Mozilla基金会的Firefox(Web浏览器)的一个延长支持版本。
Mozilla Firefox ESR 60.8之前版本和Firefox 68之前版本中存在输入验证错误漏洞，该漏洞源于程序没有正确转义’^‘字符。攻击者可利用该漏洞实施欺骗攻击。
solution:Upgrade mozilla firefox to a higher version than 68.0,and avoid the version (,68.0); Upgrade mozilla firefox_esr to a higher version than 60.8.0,and avoid the version (,60.8.0); Upgrade mozilla thunderbird to a higher version than 60.8.0,and avoid the version (,60.8.0); Upgrade debian debian_linux to a higher version than 8.0,and avoid the version 8.0; Upgrade novell suse_package_hub_for_suse_linux_enterprise to a higher version than 12,and avoid the version 12; Upgrade opensuse leap to a higher version than 15.0,15.1,and avoid the version 15.0,15.1