Lucene search
Ubuntu.comUB:CVE-2017-7831HistoryNov 15, 2017 - 12:00 a.m.
CVE-2017-7831
2017-11-1500:00:00
ubuntu.com
ubuntu.com
14
0.002 Low
EPSS
Percentile
59.8%
A vulnerability where the security wrapper does not deny access to some
exposed properties using the deprecated “exposedProps” mechanism on proxy
objects. These properties should be explicitly unavailable to proxy
objects. This vulnerability affects Firefox < 57.
Notes
| Author | Note |
|---|---|
| tyhicks | mozjs contains a copy of the SpiderMonkey JavaScript engine |
| chrisccoulson | This is not fixed in mozjs52, but it’s unclear whether it is unaffected or just ignored as https://bugzilla.mozilla.org/show_bug.cgi?id=1392026 is still private and I can’t find a changeset referencing it) |
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 17.10 | noarch | firefox | < 57.0+build4-0ubuntu0.17.10.5 | UNKNOWN |
| ubuntu | 18.04 | noarch | firefox | < 57.0.1+build2-0ubuntu1 | UNKNOWN |
| ubuntu | 18.10 | noarch | firefox | < 57.0.1+build2-0ubuntu1 | UNKNOWN |
| ubuntu | 19.04 | noarch | firefox | < 57.0.1+build2-0ubuntu1 | UNKNOWN |
| ubuntu | 19.10 | noarch | firefox | < 57.0.1+build2-0ubuntu1 | UNKNOWN |
| ubuntu | 20.04 | noarch | firefox | < 57.0.1+build2-0ubuntu1 | UNKNOWN |
| ubuntu | 20.10 | noarch | firefox | < 57.0.1+build2-0ubuntu1 | UNKNOWN |
| ubuntu | 21.04 | noarch | firefox | < 57.0.1+build2-0ubuntu1 | UNKNOWN |
| ubuntu | 21.10 | noarch | firefox | < 57.0.1+build2-0ubuntu1 | UNKNOWN |
| ubuntu | 22.04 | noarch | firefox | < 57.0.1+build2-0ubuntu1 | UNKNOWN |
References
Related
prion
prion
Security feature bypass
2018-06-11 21:29:00
cve
cve
CVE-2017-7831
2018-06-11 21:29:00
cvelist
cvelist
CVE-2017-7831
2018-06-11 21:00:00
debiancve
debiancve
CVE-2017-7831
2018-06-11 21:29:00
veracode
veracode
Information Disclosure
2020-09-21 06:26:54
openvas
openvas
Ubuntu: Security Advisory (USN-3477-4)
2018-01-05 00:00:00
Ubuntu: Security Advisory (USN-3477-2)
2017-11-28 00:00:00
Ubuntu: Security Advisory (USN-3477-1)
2017-11-18 00:00:00
ubuntu
ubuntu
Firefox regression
2018-01-03 00:00:00
Firefox regressions
2017-12-01 00:00:00
Firefox regression
2017-11-27 00:00:00
nessus
nessus
Ubuntu 14.04 LTS / 16.04 LTS : Firefox vulnerabilities (USN-3477-1)
2017-11-17 00:00:00
Mozilla Firefox ESR < 52.5 Multiple Vulnerabilities
2017-11-16 00:00:00
Ubuntu 14.04 LTS / 16.04 LTS : Firefox regressions (USN-3477-3)
2017-12-04 00:00:00
mozilla
mozilla
Security vulnerabilities fixed in Firefox 57 — Mozilla
2017-11-14 00:00:00
archlinux
archlinux
[ASA-201711-23] firefox: multiple issues
2017-11-15 00:00:00
freebsd
freebsd
mozilla -- multiple vulnerabilities
2017-11-14 00:00:00