KLA11150 Multiple vulnerabilities in Mozilla Firefox

Multiple serious vulnerabilities have been found in Firefox. Malicious users can exploit these vulnerabilities to obtain sensitive information.

1. A vulnerability in IndexedDB component can be exploited remotelly to obtain sensitive information;
2. A rendering of external SVG images and anchor links can be exploited remotelly to obtain sensitive information;

Technical details

Vulnerability(2) only affects Mozilla Firefox 57.

NB: This vulnerability does not have any public CVSS rating, so rating can be changed by the time.

Original advisories

Mozilla Foundation Security Advisory 2017-27

Related products

Mozilla-Firefox

CVE list

CVE-2017-7844 warning

CVE-2017-7843 warning

Solution

Update to the latest version

Download Mozilla Firefox

Impacts

• OSI

Obtain sensitive information. Exploitation of vulnerabilities with this impact can lead to capturing by abuser information, critical for user or system.

• DoS

Denial of service. Exploitation of vulnerabilities with this impact can lead to loss of system availability or critical functional fault.

Affected Products

• Mozilla Firefox versions earlier then 57.0.1