CVE:CVE-2019-11708
CNNVD:CNNVD-201906-851
Mozilla Firefox是美国Mozilla基金会的一款开源Web浏览器。
Mozilla Firefox 67.0.4之前版本和Firefox ESR 60.7.2之前版本中存在输入验证错误漏洞。攻击者可通过诱使用户访问特制的网站利用该漏洞绕过安全限制。
solution:Upgrade mozilla firefox to a higher version than 67.0.4,and avoid the version (,67.0.4); Upgrade mozilla firefox_esr to a higher version than 60.7.2,and avoid the version (,60.7.2); Upgrade mozilla thunderbird to a higher version than 60.7.2,and avoid the version (,60.7.2)