Описание
When a new Firefox profile is created on 64-bit Windows installations, the sandbox for 64-bit NPAPI plugins is not enabled by default. Note: This issue only affects 64-bit Windows. 32-bit Windows and other operating systems are unaffected. This vulnerability affects Firefox < 50.
| Релиз | Статус | Примечание |
|---|---|---|
| devel | not-affected | windows only |
| esm-infra-legacy/trusty | DNE | trusty/esm was DNE [trusty was not-affected [windows only]] |
| precise | not-affected | windows only |
| trusty | not-affected | windows only |
| trusty/esm | DNE | trusty was not-affected [windows only] |
| upstream | released | 50 |
| vivid/stable-phone-overlay | DNE | |
| vivid/ubuntu-core | DNE | |
| xenial | not-affected | windows only |
| yakkety | not-affected | windows only |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | not-affected | windows only |
| esm-infra-legacy/trusty | DNE | trusty/esm was DNE [trusty was not-affected [windows only]] |
| precise | not-affected | windows only |
| trusty | not-affected | windows only |
| trusty/esm | DNE | trusty was not-affected [windows only] |
| upstream | not-affected | windows only |
| vivid/stable-phone-overlay | DNE | |
| vivid/ubuntu-core | DNE | |
| xenial | not-affected | windows only |
| yakkety | not-affected | windows only |
Показывать по
EPSS
5 Medium
CVSS2
7.5 High
CVSS3
Связанные уязвимости
When a new Firefox profile is created on 64-bit Windows installations, the sandbox for 64-bit NPAPI plugins is not enabled by default. Note: This issue only affects 64-bit Windows. 32-bit Windows and other operating systems are unaffected. This vulnerability affects Firefox < 50.
When a new Firefox profile is created on 64-bit Windows installations, ...
When a new Firefox profile is created on 64-bit Windows installations, the sandbox for 64-bit NPAPI plugins is not enabled by default. Note: This issue only affects 64-bit Windows. 32-bit Windows and other operating systems are unaffected. This vulnerability affects Firefox < 50.
Уязвимость плагина NPAPI браузера Firefox операционных систем Windows, позволяющая нарушителю обойти ограничения безопасности
ALT-PU-2016-2307: package `firefox` update to version 50.0-alt1
EPSS
5 Medium
CVSS2
7.5 High
CVSS3