Published: 11/06/2018 Updated: 25/06/2018

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

CVSS v3 Base Score: 6.1 | Impact Score: 2.7 | Exploitability Score: 2.8

VMScore: 383

Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

JavaScript can be injected into an exported bookmarks file by placing JavaScript code into user-supplied tags in saved bookmarks. If the resulting exported HTML file is later opened in a browser this JavaScript will be executed. This could be used in social engineering and self-cross-site-scripting (self-XSS) attacks if users were convinced to add malicious tags to bookmarks, export them, and then open the resulting file. This vulnerability affects Firefox < 57.

Vulnerable Product	Search on Vulmon	Subscribe to Product
mozilla firefox

Firefox could be made to crash or run programs as your login if it opened a malicious website ...

USN-3477-1 caused a regression in Firefox ...

USN-3477-1 caused some minor regressions in Firefox ...

USN-3477-1 caused a regression in Firefox ...

Mozilla Foundation Security Advisory 2017-24 Security vulnerabilities fixed in Firefox 57 Announced November 14, 2017 Impact critical Products Firefox Fixed in Firefox 57 ...

JavaScript can be injected into an exported bookmarks file by placing JavaScript code into user-supplied tags in saved bookmarks in Firefox before 570 If the resulting exported HTML file is later opened in a browser this JavaScript will be executed This could be used in social engineering and self-cross-site-scripting (self-XSS) attacks if users ...

CWE-79 https://www.mozilla.org/security/advisories/mfsa2017-24/https://bugzilla.mozilla.org/show_bug.cgi?id=1366420 http://www.securitytracker.com/id/1039803 http://www.securityfocus.com/bid/101832 https://nvd.nist.gov https://usn.ubuntu.com/3477-1/

CVE-2017-7840

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect