Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2017-7765

Опубликовано: 11 июн. 2018
Источник: debian
EPSS Низкий

Описание

The "Mark of the Web" was not correctly saved on Windows when files with very long names were downloaded from the Internet. Without the Mark of the Web data, the security warning that Windows displays before running executables downloaded from the Internet is not shown. Note: This attack only affects Windows operating systems. Other operating systems are unaffected. This vulnerability affects Firefox < 54, Firefox ESR < 52.2, and Thunderbird < 52.2.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
firefoxnot-affectedpackage
firefox-esrnot-affectedpackage
icedovenot-affectedpackage

Примечания

  • https://www.mozilla.org/en-US/security/advisories/mfsa2017-15/#CVE-2017-7765

  • https://www.mozilla.org/en-US/security/advisories/mfsa2017-16/#CVE-2017-7765

  • https://www.mozilla.org/en-US/security/advisories/mfsa2017-17/#CVE-2017-7765

EPSS

Процентиль: 65%
0.00493
Низкий

Связанные уязвимости

CVSS3: 7.5
ubuntu
больше 7 лет назад

The "Mark of the Web" was not correctly saved on Windows when files with very long names were downloaded from the Internet. Without the Mark of the Web data, the security warning that Windows displays before running executables downloaded from the Internet is not shown. Note: This attack only affects Windows operating systems. Other operating systems are unaffected. This vulnerability affects Firefox < 54, Firefox ESR < 52.2, and Thunderbird < 52.2.

CVSS3: 7.5
nvd
больше 7 лет назад

The "Mark of the Web" was not correctly saved on Windows when files with very long names were downloaded from the Internet. Without the Mark of the Web data, the security warning that Windows displays before running executables downloaded from the Internet is not shown. Note: This attack only affects Windows operating systems. Other operating systems are unaffected. This vulnerability affects Firefox < 54, Firefox ESR < 52.2, and Thunderbird < 52.2.

CVSS3: 7.5
github
больше 3 лет назад

The "Mark of the Web" was not correctly saved on Windows when files with very long names were downloaded from the Internet. Without the Mark of the Web data, the security warning that Windows displays before running executables downloaded from the Internet is not shown. Note: This attack only affects Windows operating systems. Other operating systems are unaffected. This vulnerability affects Firefox < 54, Firefox ESR < 52.2, and Thunderbird < 52.2.

suse-cvrf
больше 8 лет назад

Security update for Mozilla based packages

suse-cvrf
больше 8 лет назад

Security update for MozillaFirefox, MozillaFirefox-branding-SLE

EPSS

Процентиль: 65%
0.00493
Низкий