Lucene search

MozillaCVELIST:CVE-2017-7847

HistoryJun 11, 2018 - 9:00 p.m.

CVE-2017-7847

2018-06-1121:00:00

mozilla

www.cve.org

5.7 Medium

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

75.7%

JSON

Crafted CSS in an RSS feed can leak and reveal local path strings, which may contain user name. This vulnerability affects Thunderbird < 52.5.2.

CNA Affected

[
  {
    "product": "Thunderbird",
    "vendor": "Mozilla",
    "versions": [
      {
        "lessThan": "52.5.2",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

References

www.securityfocus.com/bid/102258

www.securitytracker.com/id/1040123

access.redhat.com/errata/RHSA-2018:0061

bugzilla.mozilla.org/show_bug.cgi?id=1411708

lists.debian.org/debian-lts-announce/2017/12/msg00026.html

www.debian.org/security/2017/dsa-4075

www.mozilla.org/security/advisories/mfsa2017-30/