PT-2017-4332 · Mozilla+4 · Firefox+4
Wil Clouser
·
Publicado
2017-11-06
·
Atualizado
2025-03-14
·
CVE-2024-5697
CVSS v3.1
5.3
Média
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N |
Name of the Vulnerable Software and Affected Versions:
Firefox versions prior to 127
Description:
The issue is related to information disclosure in Firefox. It allows a remote attacker to access confidential data. A website can detect when a user takes a screenshot of a page using Firefox's built-in Screenshot functionality.
Recommendations:
For versions prior to 127, update to version 127 or later to resolve the issue. As a temporary workaround, consider disabling the Screenshot functionality until a patch is available. Restrict access to sensitive information when using affected versions of Firefox to minimize the risk of exploitation.
Exploit
Correção
Information Disclosure
Side Channel Attack
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Alt Linux
Astra Linux
Firefox
Linuxmint
Ubuntu