Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
kasperskyKaspersky LabKLA11135
HistoryNov 14, 2017 - 12:00 a.m.

KLA11135 Multiple vulnerabilities in Mozilla Firefox and Firefox ESR

2017-11-1400:00:00
Kaspersky Lab
threats.kaspersky.com
236

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.004 Low

EPSS

Percentile

73.1%

JSON

Detect date:

11/14/2017

Severity:

Critical

Description:

Multiple serious vulnerabilities have been found in Firefox and Firefox ESR. Malicious users can exploit these vulnerabilities to cause denial of service, bypass security restrictions, spoof user interface, perform cross-site scripting, gain privileges and execute arbitrary code.

Affected products:

Mozilla Firefox versions earlier than 57
Mozilla Firefox ESR versions earlier than 52.5
Mozilla Firefox versions earlier than 57
Mozilla Firefox ESR versions earlier than 52.5

Solution:

Update to the latest version
Download Mozilla Firefox

Original advisories:

Mozilla Foundation Security Advisory 2017-24
Mozilla Foundation Security Advisory 2017-25

Impacts:

ACE

Related products:

Mozilla Firefox

CVE-IDS:

CVE-2017-7828

References

Related

ubuntucve 2
debiancve 2
redhatcve 1
veracode 1
cve 2
prion 2
kaspersky 1
nessus 36
altlinux 2
osv 5
openvas 31
oraclelinux 2
suse 3
debian 5
mozilla 3
centos 2
archlinux 2
mageia 3
redhat 2
ubuntu 5
freebsd 1
gentoo 1
ubuntucve
ubuntucve
CVE-2017-7834
2017-11-15 00:00:00
CVE-2017-7828
2017-11-15 00:00:00
debiancve
debiancve
CVE-2017-7834
2018-06-11 21:29:00
CVE-2017-7828
2018-06-11 21:29:00
redhatcve
redhatcve
CVE-2017-7828
2017-11-15 08:49:44
veracode
veracode
Denial Of Service (DoS)
2019-05-02 06:37:47
cve
cve
CVE-2017-7834
2018-06-11 21:29:00
CVE-2017-7828
2018-06-11 21:29:00
prion
prion
Cross site scripting
2018-06-11 21:29:00
Design/Logic Flaw
2018-06-11 21:29:00
kaspersky
kaspersky
KLA11145 Multiple vulnerabilities in Mozilla Thunderbird
2017-11-23 00:00:00
nessus
nessus
Scientific Linux Security Update : firefox on SL6.x, SL7.x i386/x86_64 (20171117)
2017-11-20 00:00:00
Mozilla Thunderbird < 52.5 Multiple Vulnerabilities (macOS)
2017-12-06 00:00:00
EulerOS 2.0 SP2 : firefox (EulerOS-SA-2017-1300)
2017-12-01 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 10 package thunderbird version 52.5.0-alt1
2017-11-24 00:00:00
Security fix for the ALT Linux 10 package firefox-esr version 52.5.0-alt1
2017-11-15 00:00:00
osv
osv
thunderbird - security update
2017-12-09 00:00:00
thunderbird - security update
2017-12-10 00:00:00
firefox-esr - security update
2017-11-16 00:00:00
openvas
openvas
Mageia: Security Advisory (MGASA-2017-0418)
2022-01-28 00:00:00
CentOS Update for thunderbird CESA-2017:3372 centos6
2017-12-07 00:00:00
Debian: Security Advisory (DLA-1172-1)
2023-03-08 00:00:00
oraclelinux
oraclelinux
thunderbird security update
2017-12-04 00:00:00
firefox security update
2017-11-17 00:00:00
suse
suse
Security update for MozillaFirefox (important)
2017-12-05 21:09:46
Security update for MozillaFirefox (important)
2017-12-07 21:11:24
Security update for MozillaFirefox (important)
2017-11-17 00:07:09
debian
debian
[SECURITY] [DSA 4061-1] thunderbird security update
2017-12-10 21:40:56
[SECURITY] [DLA 1172-1] firefox-esr security update
2017-11-15 23:48:34
[SECURITY] [DLA 1199-1] thunderbird security update
2017-12-09 16:47:11
mozilla
mozilla
Security vulnerabilities fixed in Thunderbird 52.5 — Mozilla
2017-11-23 00:00:00
Security vulnerabilities fixed in Firefox ESR 52.5 — Mozilla
2017-11-14 00:00:00
Security vulnerabilities fixed in Firefox 57 — Mozilla
2017-11-14 00:00:00
centos
centos
thunderbird security update
2017-12-06 13:18:36
firefox security update
2017-11-17 16:50:04
archlinux
archlinux
[ASA-201711-43] thunderbird: multiple issues
2017-11-30 00:00:00
[ASA-201711-23] firefox: multiple issues
2017-11-15 00:00:00
mageia
mageia
Updated firefox packages fix security vulnerabilities
2017-11-19 14:20:04
Updated thunderbird packages fix security vulnerabilities & bugs
2017-11-29 21:52:42
Updated iceape packages fix security vulnerabilities
2018-01-02 14:48:29
redhat
redhat
(RHSA-2017:3372) Important: thunderbird security update
2017-12-03 23:25:45
(RHSA-2017:3247) Critical: firefox security update
2017-11-17 07:31:46
ubuntu
ubuntu
Thunderbird vulnerabilities
2017-12-01 00:00:00
Firefox regression
2017-11-27 00:00:00
Firefox regression
2018-01-03 00:00:00
freebsd
freebsd
mozilla -- multiple vulnerabilities
2017-11-14 00:00:00
gentoo
gentoo
Mozilla Thunderbird: Multiple vulnerabilities
2018-03-28 00:00:00

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.004 Low

EPSS

Percentile

73.1%

JSON
Related for KLA11135
ubuntucve2debiancve2redhatcve1veracode1cve2prion2kaspersky1nessus36altlinux2osv5openvas31oraclelinux2suse3debian5mozilla3centos2archlinux2mageia3redhat2ubuntu5freebsd1gentoo1