PT-2014-2021 · Mozilla+2 · Firefox+2

Muneaki Nishimura · Published 2014-09-28 · Updated 2024-12-12 · CVE-2017-7788

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 55

Description The issue is related to a security policy inheritance error. It may allow a remote attacker to bypass security restrictions. Specifically, when an "iframe" has a "sandbox" attribute and its content is specified using "srcdoc", that content does not inherit the containing page's Content Security Policy (CSP) as it should unless the sandbox attribute included "allow-same-origin".

Recommendations For versions prior to 55, update to version 55 or later to resolve the issue. As a temporary workaround, consider including "allow-same-origin" in the sandbox attribute of iframes to ensure proper CSP inheritance. Restrict access to iframes with the sandbox attribute and srcdoc content to minimize the risk of exploitation.

Exploit

Fix

Special Elements Injection

Incorrect Authorization

Weakness Enumeration

CWE-74

CWE-863

Related Identifiers

ALT-PU-2017-2060

ALT-PU-2018-1854

BDU:2021-00122

CVE-2017-7788

OPENSUSE-SU-2024:10600-1

OPENSUSE-SU-2024:14572-1

USN-3391-1

USN-3391-2

USN-3391-3

Affected Products

Alt Linux

Firefox

Ubuntu

References · 1909

• 🔥 https://bugzilla.mozilla.org/show_bug.cgi?id=1073952 · Exploit
• https://ubuntu.com/security/CVE-2017-7806 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:14572-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-7800 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2017-7788 · Vendor Advisory
• https://osv.dev/vulnerability/USN-3391-2 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-7809 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-7802 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-7803 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-7799 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2017-7788 · Security Note
• https://mozilla.org/security/advisories/mfsa2017-18 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-7780 · Vendor Advisory
• https://osv.dev/vulnerability/USN-3391-1 · Vendor Advisory
• https://wiki.astralinux.ru/pages/viewpage.action?pageId=1212483 · Vendor Advisory