CVE-2019-9801

Firefox will accept any registered Program ID as an external protocol handler and offer to launch this local application when given a matching URL on Windows…

published April 26, 2019

CVSS
—
EPSS
1%
Percentile
70.2
In the wild
Unconfirmed
What it is

Firefox will accept any registered Program ID as an external protocol handler and offer to launch this local application when given a matching URL on Windows operating systems. This should only happen if the program has specifically registered itself as a "URL Handler" in the Windows registry. *Note: This issue only affects Windows operating systems. Other operating systems are unaffected.*. This vulnerability affects Thunderbird < 60.6, Firefox ESR < 60.6, and Firefox < 66.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01310 · 70.2th percentile
Published
2019-04-26T16:13Z
EPSS history
Timeline
  • 26 APR 16:13Z
    Firefox will accept any registered Program ID as an external protocol handler and offer to launch this local application when given a matching URL on Windows…
    cvelistv5