CVE:CVE-2019-11730
CNNVD:CNNVD-201907-497
Mozilla Firefox是美国Mozilla基金会的一款开源Web浏览器。
Mozilla Firefox 68之前版本和Firefox ESR 60.8之前版本中存在信息泄露漏洞。攻击者可利用该漏洞绕过安全限制，读取用户接收到的附件内容。
solution:Upgrade mozilla firefox to a higher version than 68.0,and avoid the version (,68.0); Upgrade mozilla firefox_esr to a higher version than 60.8,and avoid the version (,60.8); Upgrade mozilla thunderbird to a higher version than 60.8,and avoid the version (,60.8); Upgrade debian debian_linux to a higher version than 8.0,and avoid the version 8.0; Upgrade opensuse leap to a higher version than 15.0,15.1,and avoid the version 15.0,15.1; Upgrade suse package_hub to a higher version than -