Published: 11/06/2018 Updated: 25/06/2018

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

CVSS v3 Base Score: 5.3 | Impact Score: 1.4 | Exploitability Score: 3.9

VMScore: 445

Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N

A vulnerability where the security wrapper does not deny access to some exposed properties using the deprecated "_exposedProps_" mechanism on proxy objects. These properties should be explicitly unavailable to proxy objects. This vulnerability affects Firefox < 57.

Vulnerable Product	Search on Vulmon	Subscribe to Product
mozilla firefox

Firefox could be made to crash or run programs as your login if it opened a malicious website ...

USN-3477-1 caused a regression in Firefox ...

USN-3477-1 caused some minor regressions in Firefox ...

USN-3477-1 caused a regression in Firefox ...

Mozilla Foundation Security Advisory 2017-24 Security vulnerabilities fixed in Firefox 57 Announced November 14, 2017 Impact critical Products Firefox Fixed in Firefox 57 ...

A vulnerability has been found in Firefox before 570 where the security wrapper does not deny access to some exposed properties using the deprecated exposedProps mechanism on proxy objects These properties should be explicitly unavailable to proxy objects ...

CWE-200 https://www.mozilla.org/security/advisories/mfsa2017-24/https://bugzilla.mozilla.org/show_bug.cgi?id=1392026 http://www.securitytracker.com/id/1039803 http://www.securityfocus.com/bid/101832 https://nvd.nist.gov https://usn.ubuntu.com/3477-1/

CVE-2017-7831

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect