The Gecko Media Plugin sandbox allows access to local files that match specific regular expressions. On OS OX, this matching allows access to some data in subdirectories of "/private/var" that could expose personal or temporary data. This has been updated to not allow access to "/private/var" and its subdirectories. Note: this issue only affects OS X. Other operating systems are not affected. This vulnerability affects Firefox < 52 and Thunderbird < 52.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade firefox-esrUpgrade thunderbirdUpgrade firefoxUpgrade linux-seamonkeyUpgrade linux-thunderbirdUpgrade linux-firefoxUpgrade seamonkeyUpgrade libxul | Mar 8, 2017 | Mar 7, 2017 |
| Mfsa2017 05 | — | Upgrade to the latest version of Mozilla FirefoxUpgrade to Mozilla Firefox version 52.0 | Mar 8, 2017 | Mar 7, 2017 |
| Mozilla Thunderbird | — | Upgrade to the latest version of Mozilla ThunderbirdUpgrade to Mozilla Thunderbird version 52.0 | Apr 11, 2017 | Apr 5, 2017 |
| Oracle Solaris | — | Upgrade mail/thunderbird to version 52.2.0-0.175.3.22.0.3.0 on Solaris 11.3Upgrade mail/thunderbird/plugin/thunderbird-lightning to version 52.2.0-0.175.3.22.0.3.0 on Solaris 11.3Upgrade web/data/firefox-bookmarks to version 52.2.0-0.175.3.22.0.2.0 on Solaris 11.3Upgrade web/browser/firefox to version 52.2.0-0.175.3.22.0.2.0 on Solaris 11.3Upgrade web/browser/firefox/plugin/firefox-java to version 52.2.0-0.175.3.22.0.2.0 on Solaris 11.3 | Jul 19, 2017 | Jul 19, 2017 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub