CVE-2017-5391 Special "about:" pages used by web content, such as RSS feeds, can load privileged "about:" pages in an iframe. If a content-injection bug were found in one of those pages this could allow for potenti...
CriticalCVSS 9.8
EPSS 1.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Special "about:" pages used by web content, such as RSS feeds, can load privileged "about:" pages in an iframe. If a content-injection bug were found in one of those pages this could allow for potential privilege escalation. This vulnerability affects Firefox < 51.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mozilla Firefox | < 51.0 | 51.0 |
| mozilla Firefox | < 51 | 51 |
References
- 95763 third-party-advisory vdb-entry
- 1037693 third-party-advisory vdb-entry
- bugzilla.mozilla.org issue-tracking patch vendor-advisory
- www.mozilla.org vendor-advisory
- Debian Security Tracker CVE-2017-5391 vendor-advisory