Main Vulnerability Database Vulnerabilities #VU9318

Information disclosure in Mozilla Firefox - CVE-2017-7831

Published: November 15, 2017

Vulnerability identifier: #VU9318

CSH Severity: Low

CVSS v4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2017-7831

CWE-ID: CWE-200

Exploitation vector: Remote access

Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote attacker to gain access to potentially sensitive information.

The vulnerability exists due to the security wrapper does not deny access to some exposed properties using the deprecated exposedProps mechanism on proxy objects.

Affected software

Mozilla Firefox
Arch Linux
Ubuntu

How to mitigate CVE-2017-7831

Update to version Firefox 57.

External References

https://www.mozilla.org/en-US/security/advisories/mfsa2017-24/

Related Security Bulletins