EUVD-2017-14485

Malware in sbrugna...

CVE-2017-5381: Improper Limitation of a Pathname to a Restricted Directory

The "export" function in the Certificate Viewer can force local filesystem navigation when the "common name" in a certificate contains slashes, allowing certificate content to be saved in unsafe locations with an arbitrary filename. This vulnerability affects Firefox 51...

PT-2017-16468

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 51 Description The issue arises from the "export" function in the Certificate Viewer, which can force local filesystem navigation when the "common name" in a certificate contains slashes. This allows certificate conte...