FreeBSDB7E23050-2D5D-4E61-9B48-62E89DB222CAmozilla -- multiple vulnerabilities
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
0.006 Low
EPSS
Percentile
77.7%
Mozilla Foundation reports:
CVE-2017-7843: Web worker in Private Browsing mode can write IndexedDB data
CVE-2017-7844: Visited history information leak through SVG image
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| FreeBSD | any | noarch | firefox | = 57.0,1 | UNKNOWN |
| FreeBSD | any | noarch | firefox | < 57.0.1,1 | UNKNOWN |
| FreeBSD | any | noarch | waterfox | < 56.0.s20171130 | UNKNOWN |
| FreeBSD | any | noarch | seamonkey | < 2.49.2 | UNKNOWN |
| FreeBSD | any | noarch | linux-seamonkey | < 2.49.2 | UNKNOWN |
| FreeBSD | any | noarch | firefox-esr | < 52.5.1,1 | UNKNOWN |
| FreeBSD | any | noarch | linux-firefox | < 52.5.1,2 | UNKNOWN |
Related
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
0.006 Low
EPSS
Percentile
77.7%