PT-2018-8426
CVE-2017-7763
·
Published
2017-06-16
·
Updated
2024-06-15
Description by
CVSS 3.1
5.3
MediumMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Name of the Vulnerable Software and Affected Versions
Firefox versions prior to 54
Firefox ESR versions prior to 52.2
Thunderbird versions prior to 52.2
Description
The issue affects the display of certain Tibetan characters in the address bar on OS X operating systems, potentially leading to domain name spoofing attacks. This is due to the default fonts on OS X displaying some Tibetan characters as whitespace. The estimated number of potentially affected devices is not specified.
Recommendations
For Firefox versions prior to 54, update to version 54 or later.
For Firefox ESR versions prior to 52.2, update to version 52.2 or later.
For Thunderbird versions prior to 52.2, update to version 52.2 or later.
Found an issue in the description? Have something to add? Feel free to write us 👾