CVE-2017-5390

2018-06-1121:29:00

Debian Security Bug Tracker

security-tracker.debian.org

0.004 Low

EPSS

Percentile

73.5%

JSON

The JSON viewer in the Developer Tools uses insecure methods to create a communication channel for copying and viewing JSON or HTTP headers data, allowing for potential privilege escalation. This vulnerability affects Thunderbird < 45.7, Firefox ESR < 45.7, and Firefox < 51.

OSVersionArchitecturePackageVersionFilename
Debian999allfirefox< 51.0-1firefox_51.0-1_all.deb
Debian12allfirefox-esr< 45.7.0esr-1firefox-esr_45.7.0esr-1_all.deb
Debian11allfirefox-esr< 45.7.0esr-1firefox-esr_45.7.0esr-1_all.deb
Debian10allfirefox-esr< 45.7.0esr-1firefox-esr_45.7.0esr-1_all.deb
Debian999allfirefox-esr< 45.7.0esr-1firefox-esr_45.7.0esr-1_all.deb
Debian13allfirefox-esr< 45.7.0esr-1firefox-esr_45.7.0esr-1_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	999	all	firefox	< 51.0-1	firefox_51.0-1_all.deb
Debian	12	all	firefox-esr	< 45.7.0esr-1	firefox-esr_45.7.0esr-1_all.deb
Debian	11	all	firefox-esr	< 45.7.0esr-1	firefox-esr_45.7.0esr-1_all.deb
Debian	10	all	firefox-esr	< 45.7.0esr-1	firefox-esr_45.7.0esr-1_all.deb
Debian	999	all	firefox-esr	< 45.7.0esr-1	firefox-esr_45.7.0esr-1_all.deb
Debian	13	all	firefox-esr	< 45.7.0esr-1	firefox-esr_45.7.0esr-1_all.deb