CVE-2019-9812Execution with Unnecessary Privileges in Mozilla Firefox

Severity
9.3CRITICALNVD
OSV9.8
EPSS
0.5%
top 33.14%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedJan 8
Latest updateMay 24

Description

Given a compromised sandboxed content process due to a separate vulnerability, it is possible to escape that sandbox by loading accounts.firefox.com in that process and forcing a log-in to a malicious Firefox Sync account. Preference settings that disable the sandbox are then synchronized to the local machine and the compromised browser would restart without the sandbox if a crash is triggered. This vulnerability affects Firefox ESR < 60.9, Firefox ESR < 68.1, and Firefox < 69.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:HExploitability: 2.8 | Impact: 5.8

Affected Packages4 packages

NVDmozilla/firefox61.068.1+2
Ubuntumozilla/firefox< 69.0+build2-0ubuntu0.16.04.4+3
CVEListV5mozilla/firefoxbefore 69
CVEListV5mozilla/firefox_esrbefore 60.9, before 68.1+1

🔴Vulnerability Details

5
GHSA
GHSA-jh9w-r6qf-jxc5: Given a compromised sandboxed content process due to a separate vulnerability, it is possible to escape that sandbox by loading accounts2022-05-24
OSV
CVE-2019-9812: Given a compromised sandboxed content process due to a separate vulnerability, it is possible to escape that sandbox by loading accounts2020-01-08
CVEList
CVE-2019-9812: Given a compromised sandboxed content process due to a separate vulnerability, it is possible to escape that sandbox by loading accounts2020-01-08
OSV
firefox regression2019-10-08
OSV
firefox vulnerabilities2019-09-04

📋Vendor Advisories

4
Ubuntu
Firefox regression2019-10-08
Ubuntu
Firefox vulnerabilities2019-09-04
Red Hat
Mozilla: Sandbox escape through Firefox Sync2019-09-03
Debian
CVE-2019-9812: firefox - Given a compromised sandboxed content process due to a separate vulnerability, i...2019

💬Community

2
Bugzilla
CVE-2019-9812 Mozilla: Sandbox escape through Firefox Sync2019-09-04
Bugzilla
Firefox 69.0 is available2019-09-03
CVE-2019-9812 — Execution with Unnecessary Privileges | cvebase