PT-2017-4024

CVE-2017-7812

·

Published

2017-07-10

·

Updated

2024-12-12

Description by

CVSS 3.1
5.3
Medium
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions Firefox versions prior to 56
Description The issue is related to the browser's behavior when web content is dragged onto certain parts of the browser UI, such as the tab bar. This can lead to the opening of links that would otherwise be restricted, potentially allowing malicious web content to open locally stored files through file: URLs. The vulnerability may also be exploited to conduct cross-site scripting attacks.
Recommendations For versions prior to 56, update to version 56 or later to resolve the issue. As a temporary workaround, consider avoiding dragging web content onto the browser UI to minimize the risk of exploitation. Restrict access to sensitive local files to prevent potential malicious activity.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Related identifiers
ALT-PU-2017-2437
ALT-PU-2018-1854
OPENSUSE-SU-2024:10600-1
OPENSUSE-SU-2024:14572-1
USN-3435-1
USN-3435-2
Found an issue in the description? Have something to add? Feel free to write us 👾