Information disclosure in Mozilla Firefox - CVE-2017-7808
Published: August 14, 2017
Vulnerability identifier: #VU7842
CSH Severity: Low
CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2017-7808
CWE-ID: CWE-200
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to obtain potentially sensitive information on the target system.
The weakness exists due to cross-origin information leak. A remote attacker can trick the victim into visiting a specially crafted website, use a content security policy (CSP) frame-ancestors directive to gain access to arbitrary files.
Successful exploitation of the vulnerability results in information disclosure.
The weakness exists due to cross-origin information leak. A remote attacker can trick the victim into visiting a specially crafted website, use a content security policy (CSP) frame-ancestors directive to gain access to arbitrary files.
Successful exploitation of the vulnerability results in information disclosure.
Affected software
Mozilla Firefox
Arch Linux
Ubuntu
Arch Linux
Ubuntu
How to mitigate CVE-2017-7808
Update to version 55.0.