SecuritySpace - CVE-2018-5118

Vulnerability Search		Search 324607 CVE descriptions and 146377 test descriptions, access 10,000+ cross references.
	Tests CVE All

CVE ID: CVE-2018-5118

Description: The screenshot images displayed in the Activity Stream page displayed when a new tab is opened is created from the meta tags of websites. An issue was discovered where the page could attempt to create these images through "file:" URLs from the local file system. This loading is blocked by the sandbox but could expose local data if combined with another attack that escapes sandbox protections. This vulnerability affects Firefox < 58.

Test IDs: None available

Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2018-5118
BugTraq ID: 102786
http://www.securityfocus.com/bid/102786
http://www.securitytracker.com/id/1040270
https://usn.ubuntu.com/3544-1/

CVE ID:	CVE-2018-5118
Description:	The screenshot images displayed in the Activity Stream page displayed when a new tab is opened is created from the meta tags of websites. An issue was discovered where the page could attempt to create these images through "file:" URLs from the local file system. This loading is blocked by the sandbox but could expose local data if combined with another attack that escapes sandbox protections. This vulnerability affects Firefox < 58.
Test IDs:	None available
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2018-5118 BugTraq ID: 102786 http://www.securityfocus.com/bid/102786 http://www.securitytracker.com/id/1040270 https://usn.ubuntu.com/3544-1/