Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2017-7765

Опубликовано: 11 июн. 2018
Источник: debian
EPSS Низкий

Описание

The "Mark of the Web" was not correctly saved on Windows when files with very long names were downloaded from the Internet. Without the Mark of the Web data, the security warning that Windows displays before running executables downloaded from the Internet is not shown. Note: This attack only affects Windows operating systems. Other operating systems are unaffected. This vulnerability affects Firefox < 54, Firefox ESR < 52.2, and Thunderbird < 52.2.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
firefoxnot-affectedpackage
firefox-esrnot-affectedpackage
icedovenot-affectedpackage

Примечания

  • https://www.mozilla.org/en-US/security/advisories/mfsa2017-15/#CVE-2017-7765

  • https://www.mozilla.org/en-US/security/advisories/mfsa2017-16/#CVE-2017-7765

  • https://www.mozilla.org/en-US/security/advisories/mfsa2017-17/#CVE-2017-7765

EPSS

Процентиль: 70%
0.0136
Низкий

Связанные уязвимости

CVSS3: 7.5
ubuntu
около 8 лет назад

The "Mark of the Web" was not correctly saved on Windows when files with very long names were downloaded from the Internet. Without the Mark of the Web data, the security warning that Windows displays before running executables downloaded from the Internet is not shown. Note: This attack only affects Windows operating systems. Other operating systems are unaffected. This vulnerability affects Firefox < 54, Firefox ESR < 52.2, and Thunderbird < 52.2.

CVSS3: 7.5
nvd
около 8 лет назад

The "Mark of the Web" was not correctly saved on Windows when files with very long names were downloaded from the Internet. Without the Mark of the Web data, the security warning that Windows displays before running executables downloaded from the Internet is not shown. Note: This attack only affects Windows operating systems. Other operating systems are unaffected. This vulnerability affects Firefox < 54, Firefox ESR < 52.2, and Thunderbird < 52.2.

CVSS3: 7.5
github
больше 4 лет назад

The "Mark of the Web" was not correctly saved on Windows when files with very long names were downloaded from the Internet. Without the Mark of the Web data, the security warning that Windows displays before running executables downloaded from the Internet is not shown. Note: This attack only affects Windows operating systems. Other operating systems are unaffected. This vulnerability affects Firefox < 54, Firefox ESR < 52.2, and Thunderbird < 52.2.

suse-cvrf
около 9 лет назад

Security update for Mozilla based packages

suse-cvrf
около 9 лет назад

Security update for MozillaFirefox, MozillaFirefox-branding-SLE

EPSS

Процентиль: 70%
0.0136
Низкий