Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2017-7807

Опубликовано: 11 июн. 2018
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS2: 5.8
CVSS3: 8.1

Описание

A mechanism that uses AppCache to hijack a URL in a domain using fallback by serving the files from a sub-path on the domain. This has been addressed by requiring fallback files be inside the manifest directory. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55.

РелизСтатусПримечание
artful

released

55.0.2+build1-0ubuntu4
bionic

released

55.0.2+build1-0ubuntu4
cosmic

released

55.0.2+build1-0ubuntu4
devel

released

55.0.2+build1-0ubuntu4
disco

released

55.0.2+build1-0ubuntu4
esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was released [55.0.1+build2-0ubuntu0.14.04.2]]
precise/esm

DNE

trusty

released

55.0.1+build2-0ubuntu0.14.04.2
trusty/esm

DNE

trusty was released [55.0.1+build2-0ubuntu0.14.04.2]
upstream

released

55.0

Показывать по

РелизСтатусПримечание
artful

ignored

end of life
bionic

not-affected

code not present
cosmic

DNE

devel

DNE

disco

DNE

esm-apps/bionic

not-affected

code not present
esm-infra-legacy/trusty

DNE

precise/esm

DNE

trusty

DNE

trusty/esm

DNE

Показывать по

РелизСтатусПримечание
artful

released

1:52.4.0+build1-0ubuntu2
bionic

released

1:52.4.0+build1-0ubuntu2
cosmic

released

1:52.4.0+build1-0ubuntu2
devel

released

1:52.4.0+build1-0ubuntu2
disco

released

1:52.4.0+build1-0ubuntu2
esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was released [1:52.3.0+build1-0ubuntu0.14.04.1]]
precise/esm

DNE

trusty

released

1:52.3.0+build1-0ubuntu0.14.04.1
trusty/esm

DNE

trusty was released [1:52.3.0+build1-0ubuntu0.14.04.1]
upstream

released

52.3.0

Показывать по

EPSS

Процентиль: 73%
0.0082
Низкий

5.8 Medium

CVSS2

8.1 High

CVSS3

Связанные уязвимости

CVSS3: 7.5
redhat
почти 8 лет назад

A mechanism that uses AppCache to hijack a URL in a domain using fallback by serving the files from a sub-path on the domain. This has been addressed by requiring fallback files be inside the manifest directory. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55.

CVSS3: 8.1
nvd
около 7 лет назад

A mechanism that uses AppCache to hijack a URL in a domain using fallback by serving the files from a sub-path on the domain. This has been addressed by requiring fallback files be inside the manifest directory. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55.

CVSS3: 8.1
debian
около 7 лет назад

A mechanism that uses AppCache to hijack a URL in a domain using fallb ...

CVSS3: 8.1
github
около 3 лет назад

A mechanism that uses AppCache to hijack a URL in a domain using fallback by serving the files from a sub-path on the domain. This has been addressed by requiring fallback files be inside the manifest directory. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55.

CVSS3: 7.5
fstec
около 8 лет назад

Уязвимость механизма AppCache браузеров Mozilla Firefox, Firefox ESR и почтового клиента Thunderbird, позволяющая нарушителю осуществить подмену домена

EPSS

Процентиль: 73%
0.0082
Низкий

5.8 Medium

CVSS2

8.1 High

CVSS3