CVE-2017-7821
N/A
N/A
Summary
A vulnerability where WebExtensions can download and attempt to open a file of some non-executable file types. This can be triggered without specific user interaction for the file download and open actions. This could be used to trigger known vulnerabilities in the programs that handle those document types. This vulnerability affects Firefox < 56.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Mozilla | Firefox | unspecified < 56 | affected |
Weaknesses
- WebExtensions can download and open non-executable files without user interaction
ADP Enrichment
CVE Program Container
Additional References
- http://www.securitytracker.com/id/1039465
- https://www.mozilla.org/security/advisories/mfsa2017-21/
- https://bugzilla.mozilla.org/show_bug.cgi?id=1346515
- http://www.securityfocus.com/bid/101057
References
- http://www.securitytracker.com/id/1039465
- https://www.mozilla.org/security/advisories/mfsa2017-21/
- https://bugzilla.mozilla.org/show_bug.cgi?id=1346515
- http://www.securityfocus.com/bid/101057
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.