CVE-2017-7825

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 56 Firefox ESR versions prior to 52.4 Thunderbird versions prior to 52.4

Description The issue is related to insufficient input validation, which can be exploited by a remote attacker to conduct spoofing attacks. Specifically, certain fonts on OS X display some Tibetan and Arabic characters as whitespace, allowing for domain name spoofing attacks when used in the address bar as part of an IDN. This issue only affects OS X operating systems.

Recommendations For Firefox versions prior to 56, update to version 56 or later to resolve the issue. For Firefox ESR versions prior to 52.4, update to version 52.4 or later to resolve the issue. For Thunderbird versions prior to 52.4, update to version 52.4 or later to resolve the issue.