PT-2017-17930 · Mozilla+3 · Firefox Esr+5
Jonathan Birch
·
Publicado
2017-06-13
·
Atualizado
2024-06-15
·
CVE-2017-7765
CVSS v3.1
7.5
Alta
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N |
Name of the Vulnerable Software and Affected Versions
Firefox versions prior to 54
Firefox ESR versions prior to 52.2
Thunderbird versions prior to 52.2
Description
A security issue was found where the "Mark of the Web" was not correctly saved on Windows when files with very long names were downloaded from the Internet. This results in the security warning that Windows displays before running executables downloaded from the Internet not being shown. The issue only affects Windows operating systems.
Recommendations
For Firefox versions prior to 54, update to version 54 or later to resolve the issue.
For Firefox ESR versions prior to 52.2, update to version 52.2 or later to resolve the issue.
For Thunderbird versions prior to 52.2, update to version 52.2 or later to resolve the issue.
Correção
RCE
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Firefox
Firefox Esr
Suse
Thunderbird
Windows