Information disclosure in Mozilla Firefox - CVE-2017-7831
Published: November 15, 2017
Vulnerability identifier: #VU9318
CSH Severity: Low
CVSS v4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear
CVE-ID: CVE-2017-7831
CWE-ID: CWE-200
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vendor: Mozilla
Affected software:
Mozilla Firefox
Mozilla Firefox
Detailed vulnerability description
The vulnerability allows a remote attacker to gain access to potentially sensitive information.
The vulnerability exists due to the security wrapper does not deny access to some exposed properties using the deprecated exposedProps mechanism on proxy objects.
How to mitigate CVE-2017-7831
Update to version Firefox 57.