PT-2017-4332 · Mozilla+4 · Firefox+4

Wil Clouser

·

Published

2017-11-06

·

Updated

2025-03-14

·

CVE-2024-5697

CVSS v3.1

5.3

Medium

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions: Firefox versions prior to 127
Description: The issue is related to information disclosure in Firefox. It allows a remote attacker to access confidential data. A website can detect when a user takes a screenshot of a page using Firefox's built-in Screenshot functionality.
Recommendations: For versions prior to 127, update to version 127 or later to resolve the issue. As a temporary workaround, consider disabling the Screenshot functionality until a patch is available. Restrict access to sensitive information when using affected versions of Firefox to minimize the risk of exploitation.

Exploit

Fix

Information Disclosure

Side Channel Attack

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-200CWE-203

Related Identifiers

ALT-PU-2024-13895
ALT-PU-2024-13898
ALT-PU-2024-15839
ALT-PU-2024-15840
BDU:2024-06881
CVE-2024-5697
OESA-2025-1265
OESA-2025-1268
OPENSUSE-SU-2024:14044-1
OPENSUSE-SU-2024:14572-1
USN-6862-1

Affected Products

Alt Linux
Astra Linux
Firefox
Linuxmint
Ubuntu