ALPINE-CVE-2019-9794

See a problem?
Please try reporting it to the source first.
Source
https://security.alpinelinux.org/vuln/CVE-2019-9794
Import Source
https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2019-9794.json
JSON Data
https://api.osv.dev/v1/vulns/ALPINE-CVE-2019-9794
Upstream
  • CVE-2019-9794
Published
2019-04-26T17:29:02Z
Modified
2026-11-03T06:32:30Z
Severity
  • 9.8 (Critical) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

A vulnerability was discovered where specific command line arguments are not properly discarded during Firefox invocation as a shell handler for URLs. This could be used to retrieve and execute files whose location is supplied through these command line arguments if Firefox is configured as the default URI handler for a given URI scheme in third party applications and these applications insufficiently sanitize URL data. Note: This issue only affects Windows operating systems. Other operating systems are unaffected.. This vulnerability affects Thunderbird < 60.6, Firefox ESR < 60.6, and Firefox < 66.

References

Affected packages

Alpine:v3.10
firefox-esr

Package

Name
firefox-esr
Purl
pkg:apk/alpine/firefox-esr?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
60.6.1-r0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2019-9794.json"
Alpine:v3.11
firefox-esr

Package

Name
firefox-esr
Purl
pkg:apk/alpine/firefox-esr?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
60.6.1-r0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2019-9794.json"
Alpine:v3.12
firefox-esr

Package

Name
firefox-esr
Purl
pkg:apk/alpine/firefox-esr?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
60.6.1-r0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2019-9794.json"
Alpine:v3.13
firefox-esr

Package

Name
firefox-esr
Purl
pkg:apk/alpine/firefox-esr?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
60.6.1-r0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2019-9794.json"
Alpine:v3.14
firefox-esr

Package

Name
firefox-esr
Purl
pkg:apk/alpine/firefox-esr?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
60.6.1-r0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2019-9794.json"
Alpine:v3.15
firefox-esr

Package

Name
firefox-esr
Purl
pkg:apk/alpine/firefox-esr?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
60.6.1-r0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2019-9794.json"
Alpine:v3.16
firefox-esr

Package

Name
firefox-esr
Purl
pkg:apk/alpine/firefox-esr?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
60.6.1-r0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2019-9794.json"
Alpine:v3.17
firefox-esr

Package

Name
firefox-esr
Purl
pkg:apk/alpine/firefox-esr?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
60.6.1-r0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2019-9794.json"
Alpine:v3.18
firefox-esr

Package

Name
firefox-esr
Purl
pkg:apk/alpine/firefox-esr?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
60.6.1-r0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2019-9794.json"
Alpine:v3.19
firefox-esr

Package

Name
firefox-esr
Purl
pkg:apk/alpine/firefox-esr?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
60.6.1-r0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2019-9794.json"
Alpine:v3.20
firefox-esr

Package

Name
firefox-esr
Purl
pkg:apk/alpine/firefox-esr?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
60.6.1-r0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2019-9794.json"
Alpine:v3.21
firefox-esr

Package

Name
firefox-esr
Purl
pkg:apk/alpine/firefox-esr?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
60.6.1-r0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2019-9794.json"
Alpine:v3.22
firefox-esr

Package

Name
firefox-esr
Purl
pkg:apk/alpine/firefox-esr?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
60.6.1-r0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2019-9794.json"
Alpine:v3.23
firefox-esr

Package

Name
firefox-esr
Purl
pkg:apk/alpine/firefox-esr?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
60.6.1-r0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2019-9794.json"
Alpine:v3.9
firefox-esr

Package

Name
firefox-esr
Purl
pkg:apk/alpine/firefox-esr?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
60.6.1-r0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2019-9794.json"