If web content on a page is dragged onto portions of the browser UI, such as the tab bar, links can be opened that otherwise would not be allowed to open. This can allow malicious web content to open a locally stored file through "file:" URLs. This vulnerability affects Firefox < 56.
References
| Link | Resource |
|---|---|
| http://www.securityfocus.com/bid/101057 | Third Party Advisory VDB Entry |
| http://www.securitytracker.com/id/1039465 | Third Party Advisory VDB Entry |
| https://bugzilla.mozilla.org/show_bug.cgi?id=1379842 | Exploit Issue Tracking |
| https://www.mozilla.org/security/advisories/mfsa2017-21/ | Vendor Advisory |
| http://www.securityfocus.com/bid/101057 | Third Party Advisory VDB Entry |
| http://www.securitytracker.com/id/1039465 | Third Party Advisory VDB Entry |
| https://bugzilla.mozilla.org/show_bug.cgi?id=1379842 | Exploit Issue Tracking |
| https://www.mozilla.org/security/advisories/mfsa2017-21/ | Vendor Advisory |
Configurations
History
21 Nov 2024, 03:32
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://www.securityfocus.com/bid/101057 - Third Party Advisory, VDB Entry | |
| References | () http://www.securitytracker.com/id/1039465 - Third Party Advisory, VDB Entry | |
| References | () https://bugzilla.mozilla.org/show_bug.cgi?id=1379842 - Exploit, Issue Tracking | |
| References | () https://www.mozilla.org/security/advisories/mfsa2017-21/ - Vendor Advisory |
Information
Published : 2018-06-11 21:29
Updated : 2024-11-21 03:32
NVD link : CVE-2017-7812
Mitre link : CVE-2017-7812
CVE.ORG link : CVE-2017-7812
JSON object : View
Products Affected
mozilla
- firefox
CWE
CWE-200
Exposure of Sensitive Information to an Unauthorized Actor