CVE-2017-16639 Tor Browser on Windows before 8.0 allows remote attackers to bypass the intended anonymity feature and discover a client IP address, a different vulnerability than CVE-2017-16541. User interaction is....
MediumCVSS 4.3
EPSS 2.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Tor Browser on Windows before 8.0 allows remote attackers to bypass the intended anonymity feature and discover a client IP address, a different vulnerability than CVE-2017-16541. User interaction is required to trigger this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| torproject tor browser | < 8.0 | 8.0 |
References
- packetstormsecurity.com exploit third-party-advisory vdb-entry
- 105346 third-party-advisory vdb-entry
- 20180912 CVE-2017-16639 - Tor Browser Deanonymization With SMB exploit issue-tracking mailing-list third-party-advisory
- www.wearesegment.com exploit third-party-advisory