6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:N/A:N
Mozilla Firefox is vulnerable to information disclosure. A malicious page can extract pixel values from a targeted user using SVG filters that don’t use the fixed point math implementation on a target iframe. An attacker could obtain history information and read text values across domains. This violates same-origin policy and leads to information disclosure.
rhn.redhat.com/errata/RHSA-2017-0459.html
rhn.redhat.com/errata/RHSA-2017-0461.html
rhn.redhat.com/errata/RHSA-2017-0498.html
www.securityfocus.com/bid/96693
www.securitytracker.com/id/1037966
access.redhat.com/errata/RHSA-2017:0459
access.redhat.com/security/updates/classification/#critical
bugzilla.mozilla.org/show_bug.cgi?id=1336622
security.gentoo.org/glsa/201705-06
security.gentoo.org/glsa/201705-07
www.debian.org/security/2017/dsa-3805
www.debian.org/security/2017/dsa-3832
www.mozilla.org/en-US/security/advisories/mfsa2017-06
www.mozilla.org/security/advisories/mfsa2017-05/
www.mozilla.org/security/advisories/mfsa2017-06/
www.mozilla.org/security/advisories/mfsa2017-07/
www.mozilla.org/security/advisories/mfsa2017-09/
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:N/A:N