Lucene search

K
ubuntucveUbuntu.comUB:CVE-2017-7820
HistoryOct 02, 2017 - 12:00 a.m.

CVE-2017-7820

2017-10-0200:00:00
ubuntu.com
ubuntu.com
9

0.005 Low

EPSS

Percentile

75.9%

The “instanceof” operator can bypass the Xray wrapper mechanism. When
called on web content from the browser itself or an extension the web
content can provide its own result for that operator, possibly tricking the
browser or extension into mishandling the element. This vulnerability
affects Firefox < 56.

OSVersionArchitecturePackageVersionFilename
ubuntu17.10noarchfirefox< 56.0+build6-0ubuntu1UNKNOWN
ubuntu18.04noarchfirefox< 56.0+build6-0ubuntu1UNKNOWN
ubuntu14.04noarchfirefox< 56.0+build6-0ubuntu0.14.04.1UNKNOWN
ubuntu16.04noarchfirefox< 56.0+build6-0ubuntu0.16.04.1UNKNOWN
ubuntu17.04noarchfirefox< 56.0+build6-0ubuntu0.17.04.1UNKNOWN

0.005 Low

EPSS

Percentile

75.9%