 |
Home ▼ Bookkeeping
Online ▼ Security
Audits ▼
Managed
DNS ▼
About
Order
FAQ
Acceptable Use Policy
Dynamic DNS Clients
Configure Domains Dyanmic DNS Update Password Network
Monitor ▼
Enterprise Package
Advanced Package
Standard Package
Free Trial
FAQ
Price/Feature Summary
Order/Renew
Examples
Configure/Status Alert Profiles | ||
| Test ID: | 1.3.6.1.4.1.25623.1.2.1.2017.27 |
| Category: | General |
| Title: | Mozilla Firefox Security Advisory (MFSA2017-27) - Linux |
| Summary: | This host is missing a security update for Mozilla Firefox. |
| Description: | Summary: This host is missing a security update for Mozilla Firefox. Vulnerability Insight: CVE-2017-7843: Web worker in Private Browsing mode can write IndexedDB data When Private Browsing mode is used, it is possible for a web worker to write persistent data to IndexedDB and fingerprint a user uniquely. IndexedDB should not be available in Private Browsing mode and this stored data will persist across multiple private browsing mode sessions because it is not cleared when exiting. CVE-2017-7844: Visited history information leak through SVG image A combination of an external SVG image referenced on a page and the coloring of anchor links stored within this image can be used to determine which pages a user has in their history. This can allow a malicious website to query user history. Note: This issue only affects Firefox 57. Earlier releases are not affected. Affected Software/OS: Firefox version(s) below 57.0.1. Solution: The vendor has released an update. Please see the reference(s) for more information. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N |
| Cross-Ref: |
Common Vulnerability Exposure (CVE) ID: CVE-2017-7843 BugTraq ID: 102039 http://www.securityfocus.com/bid/102039 BugTraq ID: 102112 http://www.securityfocus.com/bid/102112 Debian Security Information: DSA-4062 (Google Search) https://www.debian.org/security/2017/dsa-4062 https://lists.debian.org/debian-lts-announce/2017/12/msg00003.html RedHat Security Advisories: RHSA-2017:3382 https://access.redhat.com/errata/RHSA-2017:3382 http://www.securitytracker.com/id/1039954 Common Vulnerability Exposure (CVE) ID: CVE-2017-7844 |
| Copyright | Copyright (C) 2021 Greenbone Networks GmbH |
| This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below. |