ByteOS Network

CVE Vulnerability Details :

CVE-2019-9797

PUBLISHED

More Info Official Page

Assigner-mozilla

Assigner Org ID-f16b083a-5664-49f3-a51e-8d479e5ed7fe

Published At-26 Apr, 2019 | 16:13

Updated At-04 Aug, 2024 | 22:01

▼CVE Numbering Authority (CNA)

Cross-origin images can be read in violation of the same-origin policy by exporting an image after using createImageBitmap to read the image and then rendering the resulting bitmap image within a canvas element. This vulnerability affects Firefox < 66.

Affected Products

Vendor

Mozilla Corporation

Product

Firefox

Versions

Affected

From unspecified before 66 (custom)

Problem Types

Type	CWE ID	Description
text	N/A	Cross-origin theft of images with createImageBitmap

Type: text

CWE ID: N/A

Description: Cross-origin theft of images with createImageBitmap

References

Hyperlink	Resource
https://www.mozilla.org/security/advisories/mfsa2019-07/	x_refsource_MISC
https://bugzilla.mozilla.org/show_bug.cgi?id=1528909	x_refsource_MISC
https://seclists.org/bugtraq/2019/May/56	mailing-list x_refsource_BUGTRAQ
https://seclists.org/bugtraq/2019/May/59	mailing-list x_refsource_BUGTRAQ
https://www.debian.org/security/2019/dsa-4448	vendor-advisory x_refsource_DEBIAN
https://lists.debian.org/debian-lts-announce/2019/05/msg00032.html	mailing-list x_refsource_MLIST
https://access.redhat.com/errata/RHSA-2019:1265	vendor-advisory x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2019:1267	vendor-advisory x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2019:1269	vendor-advisory x_refsource_REDHAT
https://www.debian.org/security/2019/dsa-4451	vendor-advisory x_refsource_DEBIAN
https://seclists.org/bugtraq/2019/May/67	mailing-list x_refsource_BUGTRAQ
https://lists.debian.org/debian-lts-announce/2019/05/msg00038.html	mailing-list x_refsource_MLIST
https://usn.ubuntu.com/3997-1/	vendor-advisory x_refsource_UBUNTU
http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00002.html	vendor-advisory x_refsource_SUSE
https://access.redhat.com/errata/RHSA-2019:1310	vendor-advisory x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2019:1308	vendor-advisory x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2019:1309	vendor-advisory x_refsource_REDHAT
http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00029.html	vendor-advisory x_refsource_SUSE
http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00084.html	vendor-advisory x_refsource_SUSE

Hyperlink: https://www.mozilla.org/security/advisories/mfsa2019-07/

Resource:

x_refsource_MISC

Hyperlink: https://bugzilla.mozilla.org/show_bug.cgi?id=1528909

Resource:

x_refsource_MISC

Hyperlink: https://seclists.org/bugtraq/2019/May/56

Resource:

mailing-list

x_refsource_BUGTRAQ

Hyperlink: https://seclists.org/bugtraq/2019/May/59

Resource:

mailing-list

x_refsource_BUGTRAQ

Hyperlink: https://www.debian.org/security/2019/dsa-4448

Resource:

vendor-advisory

x_refsource_DEBIAN

Hyperlink: https://lists.debian.org/debian-lts-announce/2019/05/msg00032.html

Resource:

mailing-list

x_refsource_MLIST

Hyperlink: https://access.redhat.com/errata/RHSA-2019:1265

Resource:

vendor-advisory

x_refsource_REDHAT

Hyperlink: https://access.redhat.com/errata/RHSA-2019:1267

Resource:

vendor-advisory

x_refsource_REDHAT

Hyperlink: https://access.redhat.com/errata/RHSA-2019:1269

Resource:

vendor-advisory

x_refsource_REDHAT

Hyperlink: https://www.debian.org/security/2019/dsa-4451

Resource:

vendor-advisory

x_refsource_DEBIAN

Hyperlink: https://seclists.org/bugtraq/2019/May/67

Resource:

mailing-list

x_refsource_BUGTRAQ

Hyperlink: https://lists.debian.org/debian-lts-announce/2019/05/msg00038.html

Resource:

mailing-list

x_refsource_MLIST

Hyperlink: https://usn.ubuntu.com/3997-1/

Resource:

vendor-advisory

x_refsource_UBUNTU

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00002.html

Resource:

vendor-advisory

x_refsource_SUSE

Hyperlink: https://access.redhat.com/errata/RHSA-2019:1310

Resource:

vendor-advisory

x_refsource_REDHAT

Hyperlink: https://access.redhat.com/errata/RHSA-2019:1308

Resource:

vendor-advisory

x_refsource_REDHAT

Hyperlink: https://access.redhat.com/errata/RHSA-2019:1309

Resource:

vendor-advisory

x_refsource_REDHAT

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00029.html

Resource:

vendor-advisory

x_refsource_SUSE

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00084.html

Resource:

vendor-advisory

x_refsource_SUSE

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
https://www.mozilla.org/security/advisories/mfsa2019-07/	x_refsource_MISC x_transferred
https://bugzilla.mozilla.org/show_bug.cgi?id=1528909	x_refsource_MISC x_transferred
https://seclists.org/bugtraq/2019/May/56	mailing-list x_refsource_BUGTRAQ x_transferred
https://seclists.org/bugtraq/2019/May/59	mailing-list x_refsource_BUGTRAQ x_transferred
https://www.debian.org/security/2019/dsa-4448	vendor-advisory x_refsource_DEBIAN x_transferred
https://lists.debian.org/debian-lts-announce/2019/05/msg00032.html	mailing-list x_refsource_MLIST x_transferred
https://access.redhat.com/errata/RHSA-2019:1265	vendor-advisory x_refsource_REDHAT x_transferred
https://access.redhat.com/errata/RHSA-2019:1267	vendor-advisory x_refsource_REDHAT x_transferred
https://access.redhat.com/errata/RHSA-2019:1269	vendor-advisory x_refsource_REDHAT x_transferred
https://www.debian.org/security/2019/dsa-4451	vendor-advisory x_refsource_DEBIAN x_transferred
https://seclists.org/bugtraq/2019/May/67	mailing-list x_refsource_BUGTRAQ x_transferred
https://lists.debian.org/debian-lts-announce/2019/05/msg00038.html	mailing-list x_refsource_MLIST x_transferred
https://usn.ubuntu.com/3997-1/	vendor-advisory x_refsource_UBUNTU x_transferred
http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00002.html	vendor-advisory x_refsource_SUSE x_transferred
https://access.redhat.com/errata/RHSA-2019:1310	vendor-advisory x_refsource_REDHAT x_transferred
https://access.redhat.com/errata/RHSA-2019:1308	vendor-advisory x_refsource_REDHAT x_transferred
https://access.redhat.com/errata/RHSA-2019:1309	vendor-advisory x_refsource_REDHAT x_transferred
http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00029.html	vendor-advisory x_refsource_SUSE x_transferred
http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00084.html	vendor-advisory x_refsource_SUSE x_transferred