CVE ID:	CVE-2017-7791
Description:	On pages containing an iframe, the "data:" protocol can be used to create a modal alert that will render over arbitrary domains following page navigation, spoofing of the origin of the modal alert from the iframe content. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55.
Test IDs:	1.3.6.1.4.1.25623.1.1.4.2017.2589.1
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2017-7791 BugTraq ID: 100240 http://www.securityfocus.com/bid/100240 Debian Security Information: DSA-3928 (Google Search) https://www.debian.org/security/2017/dsa-3928 Debian Security Information: DSA-3968 (Google Search) https://www.debian.org/security/2017/dsa-3968 https://security.gentoo.org/glsa/201803-14 RedHat Security Advisories: RHSA-2017:2456 https://access.redhat.com/errata/RHSA-2017:2456 RedHat Security Advisories: RHSA-2017:2534 https://access.redhat.com/errata/RHSA-2017:2534 http://www.securitytracker.com/id/1039124