Security Alert (A19-10-07): Multiple Vulnerabilities in Firefox
23 October 2019
Mozilla has published two security advisories (MFSA 2019-33 and MFSA 2019-34) to address multiple browser vulnerabilities. A remote attacker could entice a user running a vulnerable browser to open a web page with specially crafted content to exploit the vulnerabilities.
Firefox prior to version 70
Firefox ESR prior to version 68.2
Successful exploitation of the vulnerabilities could lead to arbitrary code execution, security restriction bypass, cross-site scripting, memory corruption or application crash on an affected system.
Mozilla has released new versions of the product to address the issues and they can be downloaded at the following URLs:
Firefox 70 for Windows, Macintosh and Linux https://www.mozilla.org/en-US/firefox/all/
Firefox ESR 68.2 for Windows, Macintosh and Linux https://www.mozilla.org/en-US/firefox/organizations/all/
Users of affected systems should follow the recommendations provided by the product vendor and take immediate actions to mitigate the risk.