Vulnerability   
Search   
    Search 219043 CVE descriptions
and 99761 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

CVE ID:CVE-2017-7791
Description:On pages containing an iframe, the "data:" protocol can be used to create a modal alert that will render over arbitrary domains following page navigation, spoofing of the origin of the modal alert from the iframe content. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55.
Test IDs: None available
Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2017-7791
BugTraq ID: 100240
http://www.securityfocus.com/bid/100240
Debian Security Information: DSA-3928 (Google Search)
https://www.debian.org/security/2017/dsa-3928
Debian Security Information: DSA-3968 (Google Search)
https://www.debian.org/security/2017/dsa-3968
https://security.gentoo.org/glsa/201803-14
RedHat Security Advisories: RHSA-2017:2456
https://access.redhat.com/errata/RHSA-2017:2456
RedHat Security Advisories: RHSA-2017:2534
https://access.redhat.com/errata/RHSA-2017:2534
http://www.securitytracker.com/id/1039124




© 1998-2024 E-Soft Inc. All rights reserved.