CVE-2019-11765 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2019-11765 Interim 1 25 2025-05-01T00:59:13Z current 2021-09-30T01:13:54Z 2025-05-01T00:59:13Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2019-11765 A compromised content process could send a message to the parent process that would cause the 'Click to Play' permission prompt to be shown. However, due to lack of validation from the parent process, if the user accepted the permission request an attacker-controlled permission would be granted rather than the 'Click to Play' permission. This vulnerability affects Firefox < 70. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/3HI2RC7AJAHY74Q6MK7GNGWU6TITB22V/ E-Mail link for openSUSE-SU-2024:14572-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Linux Enterprise Module for Desktop Applications 15 SP1 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise Module for Desktop Applications 15 SUSE Linux Enterprise Module for Desktop Applications 15 SP1 SUSE Linux Enterprise High Performance Computing 12 SP4 SUSE Linux Enterprise Module for Desktop Applications 15 SUSE Linux Enterprise Module for Desktop Applications 15 SP1 SUSE Linux Enterprise Server 11 SP1 for Teradata SUSE Linux Enterprise Server 11 SP3 for Teradata SUSE Linux Enterprise Server 11 SP4 LTSS SUSE Linux Enterprise Server 12 SP1-LTSS SUSE Linux Enterprise Server 12 SP2-LTSS SUSE Linux Enterprise Server 12 SP3-LTSS SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SUSE Linux Enterprise Module for Desktop Applications 15 SP1 SUSE Linux Enterprise Server Teradata 12 SP3 SUSE Linux Enterprise Server for SAP Applications 12 SP2 SUSE Linux Enterprise Server for SAP Applications 12 SP3 SUSE Linux Enterprise Server for SAP Applications 12 SP4 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise Module for Desktop Applications 15 SUSE Linux Enterprise Module for Desktop Applications 15 SP1 SUSE Linux Enterprise Module for Desktop Applications 15 SP1 SUSE Linux Enterprise Module for Desktop Applications 15 SP1 SUSE Linux Enterprise Module for Desktop Applications 15 SP1 openSUSE Tumbleweed MozillaFirefox MozillaFirefox-92.0-1.2 MozillaFirefox-branding-upstream-92.0-1.2 MozillaFirefox-devel MozillaFirefox-devel-92.0-1.2 MozillaFirefox-translations-common MozillaFirefox-translations-common-92.0-1.2 MozillaFirefox-translations-other MozillaFirefox-translations-other-92.0-1.2 firefox-esr-128.5.1-1.1 firefox-esr-branding-upstream-128.5.1-1.1 firefox-esr-translations-common-128.5.1-1.1 firefox-esr-translations-other-128.5.1-1.1 MozillaFirefox-92.0-1.2 as a component of openSUSE Tumbleweed MozillaFirefox-branding-upstream-92.0-1.2 as a component of openSUSE Tumbleweed MozillaFirefox-devel-92.0-1.2 as a component of openSUSE Tumbleweed MozillaFirefox-translations-common-92.0-1.2 as a component of openSUSE Tumbleweed MozillaFirefox-translations-other-92.0-1.2 as a component of openSUSE Tumbleweed firefox-esr-128.5.1-1.1 as a component of openSUSE Tumbleweed firefox-esr-branding-upstream-128.5.1-1.1 as a component of openSUSE Tumbleweed firefox-esr-translations-common-128.5.1-1.1 as a component of openSUSE Tumbleweed firefox-esr-translations-other-128.5.1-1.1 as a component of openSUSE Tumbleweed MozillaFirefox as a component of SUSE Linux Enterprise Desktop 12 SP4 MozillaFirefox-translations-common as a component of SUSE Linux Enterprise Desktop 12 SP4 MozillaFirefox as a component of SUSE Linux Enterprise High Performance Computing 12 SP4 MozillaFirefox as a component of SUSE Linux Enterprise Module for Desktop Applications 15 MozillaFirefox-devel as a component of SUSE Linux Enterprise Module for Desktop Applications 15 MozillaFirefox-translations-common as a component of SUSE Linux Enterprise Module for Desktop Applications 15 MozillaFirefox-translations-other as a component of SUSE Linux Enterprise Module for Desktop Applications 15 MozillaFirefox as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP1 MozillaFirefox-devel as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP1 MozillaFirefox-translations-common as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP1 MozillaFirefox-translations-other as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP1 MozillaFirefox as a component of SUSE Linux Enterprise Server 11 SP1 for Teradata MozillaFirefox as a component of SUSE Linux Enterprise Server 11 SP3 for Teradata MozillaFirefox as a component of SUSE Linux Enterprise Server 11 SP4 LTSS MozillaFirefox as a component of SUSE Linux Enterprise Server 12 SP1-LTSS MozillaFirefox-devel as a component of SUSE Linux Enterprise Server 12 SP1-LTSS MozillaFirefox-translations-common as a component of SUSE Linux Enterprise Server 12 SP1-LTSS MozillaFirefox as a component of SUSE Linux Enterprise Server 12 SP2-LTSS MozillaFirefox-devel as a component of SUSE Linux Enterprise Server 12 SP2-LTSS MozillaFirefox-translations-common as a component of SUSE Linux Enterprise Server 12 SP2-LTSS MozillaFirefox as a component of SUSE Linux Enterprise Server 12 SP3-LTSS MozillaFirefox-devel as a component of SUSE Linux Enterprise Server 12 SP3-LTSS MozillaFirefox-translations-common as a component of SUSE Linux Enterprise Server 12 SP3-LTSS MozillaFirefox as a component of SUSE Linux Enterprise Server 12 SP4 MozillaFirefox-devel as a component of SUSE Linux Enterprise Server 12 SP4 MozillaFirefox-translations-common as a component of SUSE Linux Enterprise Server 12 SP4 MozillaFirefox as a component of SUSE Linux Enterprise Server 12 SP5 MozillaFirefox-devel as a component of SUSE Linux Enterprise Server 12 SP5 MozillaFirefox-translations-common as a component of SUSE Linux Enterprise Server 12 SP5 MozillaFirefox as a component of SUSE Linux Enterprise Server Teradata 12 SP3 MozillaFirefox as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 MozillaFirefox-devel as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 MozillaFirefox-translations-common as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 MozillaFirefox as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 MozillaFirefox-devel as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 MozillaFirefox-translations-common as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 MozillaFirefox as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 MozillaFirefox-devel as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 MozillaFirefox-translations-common as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 MozillaFirefox-devel as a component of SUSE Linux Enterprise Software Development Kit 12 SP4 MozillaFirefox as a component of SUSE Linux Enterprise Software Development Kit 12 SP4 A compromised content process could send a message to the parent process that would cause the 'Click to Play' permission prompt to be shown. However, due to lack of validation from the parent process, if the user accepted the permission request an attacker-controlled permission would be granted rather than the 'Click to Play' permission. This vulnerability affects Firefox < 70. CVE-2019-11765 openSUSE Tumbleweed:MozillaFirefox-92.0-1.2 openSUSE Tumbleweed:MozillaFirefox-branding-upstream-92.0-1.2 openSUSE Tumbleweed:MozillaFirefox-devel-92.0-1.2 openSUSE Tumbleweed:MozillaFirefox-translations-common-92.0-1.2 openSUSE Tumbleweed:MozillaFirefox-translations-other-92.0-1.2 openSUSE Tumbleweed:firefox-esr-128.5.1-1.1 openSUSE Tumbleweed:firefox-esr-branding-upstream-128.5.1-1.1 openSUSE Tumbleweed:firefox-esr-translations-common-128.5.1-1.1 openSUSE Tumbleweed:firefox-esr-translations-other-128.5.1-1.1 SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox SUSE Linux Enterprise Desktop 12 SP4:MozillaFirefox-translations-common SUSE Linux Enterprise High Performance Computing 12 SP4:MozillaFirefox SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-devel SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-common SUSE Linux Enterprise Module for Desktop Applications 15 SP1:MozillaFirefox-translations-other SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-devel SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-common SUSE Linux Enterprise Module for Desktop Applications 15:MozillaFirefox-translations-other SUSE Linux Enterprise Server 11 SP1 for Teradata:MozillaFirefox SUSE Linux Enterprise Server 11 SP3 for Teradata:MozillaFirefox SUSE Linux Enterprise Server 11 SP4 LTSS:MozillaFirefox SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common SUSE Linux Enterprise Server 12 SP3-LTSS:MozillaFirefox SUSE Linux Enterprise Server 12 SP3-LTSS:MozillaFirefox-devel SUSE Linux Enterprise Server 12 SP3-LTSS:MozillaFirefox-translations-common SUSE Linux Enterprise Server 12 SP4:MozillaFirefox SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-devel SUSE Linux Enterprise Server 12 SP4:MozillaFirefox-translations-common SUSE Linux Enterprise Server 12 SP5:MozillaFirefox SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common SUSE Linux Enterprise Server Teradata 12 SP3:MozillaFirefox SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-devel SUSE Linux Enterprise Server for SAP Applications 12 SP3:MozillaFirefox-translations-common SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-devel SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox SUSE Linux Enterprise Software Development Kit 12 SP4:MozillaFirefox-devel moderate 4.3 AV:N/AC:M/Au:N/C:N/I:P/A:N 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N