PT-2017-4024 · Mozilla+2 · Firefox+2
Tooru Fujisawa
·
Publicado
2017-07-10
·
Atualizado
2024-12-12
·
CVE-2017-7812
CVSS v3.1
5.3
Média
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Firefox versions prior to 56
Description
The issue is related to the browser's behavior when web content is dragged onto certain parts of the browser UI, such as the tab bar. This can lead to the opening of links that would otherwise be restricted, potentially allowing malicious web content to open locally stored files through
file: URLs. The vulnerability may also be exploited to conduct cross-site scripting attacks.Recommendations
For versions prior to 56, update to version 56 or later to resolve the issue. As a temporary workaround, consider avoiding dragging web content onto the browser UI to minimize the risk of exploitation. Restrict access to sensitive local files to prevent potential malicious activity.
Exploit
Correção
Information Disclosure
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Firefox
Ubuntu