Описание
Tor Browser before 7.0.9 on macOS and Linux allows remote attackers to bypass the intended anonymity feature and discover a client IP address via vectors involving a crafted web site that leverages file:// mishandling in Firefox, aka TorMoil. NOTE: Tails is unaffected.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| firefox | fixed | 62.0-1 | package | |
| firefox-esr | fixed | 60.2.0esr-1 | package | |
| firefox-esr | fixed | 60.2.0esr-1~deb9u2 | stretch | package |
| thunderbird | fixed | 1:60.2.1-1 | package |
Примечания
https://trac.torproject.org/projects/tor/ticket/24052
https://blog.torproject.org/tor-browser-709-released
https://www.mozilla.org/en-US/security/advisories/mfsa2018-20/#CVE-2017-16541
https://www.mozilla.org/en-US/security/advisories/mfsa2018-21/#CVE-2017-16541
https://www.mozilla.org/en-US/security/advisories/mfsa2018-25/#CVE-2017-16541
EPSS
Связанные уязвимости
Tor Browser before 7.0.9 on macOS and Linux allows remote attackers to bypass the intended anonymity feature and discover a client IP address via vectors involving a crafted web site that leverages file:// mishandling in Firefox, aka TorMoil. NOTE: Tails is unaffected.
Tor Browser before 7.0.9 on macOS and Linux allows remote attackers to bypass the intended anonymity feature and discover a client IP address via vectors involving a crafted web site that leverages file:// mishandling in Firefox, aka TorMoil. NOTE: Tails is unaffected.
Tor Browser before 7.0.9 on macOS and Linux allows remote attackers to bypass the intended anonymity feature and discover a client IP address via vectors involving a crafted web site that leverages file:// mishandling in Firefox, aka TorMoil. NOTE: Tails is unaffected.
Tor Browser before 7.0.9 on macOS and Linux allows remote attackers to bypass the intended anonymity feature and discover a client IP address via vectors involving a crafted web site that leverages file:// mishandling in Firefox, aka TorMoil. NOTE: Tails is unaffected.
Уязвимость automount-демона браузеров Tor, Firefox, Firefox ESR и почтового клиента Thunderbird, позволяющая нарушителю обойти ограничения безопасности
EPSS