CVEvulnerability
CVE-2017-7812
5.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2018-06-11
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 5.3 MEDIUM — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-200
Description
If web content on a page is dragged onto portions of the browser UI, such as the tab bar, links can be opened that otherwise would not be allowed to open. This can allow malicious web content to open a locally stored file through "file:" URLs. This vulnerability affects Firefox < 56.
Affected configurations
• mozilla firefox (<= 55.0.3)
Related
Weakness · CWE (1)
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness
References
- http://www.securityfocus.com/bid/101057 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1039465 Third Party Advisory, VDB Entry
- https://bugzilla.mozilla.org/show_bug.cgi?id=1379842 Exploit, Issue Tracking
- https://www.mozilla.org/security/advisories/mfsa2017-21/ Vendor Advisory
- http://www.securityfocus.com/bid/101057 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1039465 Third Party Advisory, VDB Entry
- https://bugzilla.mozilla.org/show_bug.cgi?id=1379842 Exploit, Issue Tracking
- https://www.mozilla.org/security/advisories/mfsa2017-21/ Vendor Advisory