CVEs-PoC/2019/CVE-2019-9811.md

CVE-2019-9811

Description

As part of a winning Pwn2Own entry, a researcher demonstrated a sandbox escape by installing a malicious language pack and then opening a browser feature that used the compromised translation. This vulnerability affects Firefox ESR < 60.8, Firefox < 68, and Thunderbird < 60.8.

POC

Reference

• https://bugzilla.mozilla.org/show_bug.cgi?id=1563327

Github

• https://github.com/MyKings/security-study-tutorial