Is Pale Moon Susceptible to 'Coinbase'?

therube · Post by **therube** » 2019-06-19, 15:32

Is Pale Moon Susceptible to 'Coinbase', mfsa2019-18?

CVE-2019-11707: Type confusion in Array.pop

http://tenfourfox.blogspot.com/2019/06/ ... spill.html

Post by **Moonchild** » 2019-06-19, 15:41

For the record: We are not vulnerable to the exploit patched in the most recent Firefox point releases. You may breathe easy. We will still be looking at the code and (if prudent) apply defense-in-depth for futureproofing, of course.

https://twitter.com/palemoonbrowser/sta ... 2260123648

ibmhal5678 · Post by **ibmhal5678** » 2019-06-20, 23:23

What's going on with Firefox?
https://www.mozilla.org/en-US/security/ ... sa2019-18/

Seems they are adressing another security issue:
https://www.mozilla.org/en-US/security/ ... sa2019-19/

I had two/three updates for FirefoxQuantum/FFESR today.

Post by **Moonchild** » 2019-06-21, 09:03

https://www.mozilla.org/en-US/security/advisories/mfsa2019-19/

Insufficient vetting of parameters passed with the Prompt:Open IPC message between child and parent processes can result in the non-sandboxed parent process opening web content chosen by a compromised child process.

i.e.: Yet another electrolysis (multi-process) inter-process communication vulnerability that doesn't apply to UXP.

Pale Moon forum

Is Pale Moon Susceptible to 'Coinbase'?

Is Pale Moon Susceptible to 'Coinbase'?

Re: Is Pale Moon Susceptible to 'Coinbase'?

Re: Is Pale Moon Susceptible to 'Coinbase'?

Re: Is Pale Moon Susceptible to 'Coinbase'?