The Developer Tools feature suffers from a XUL injection vulnerability due to improper sanitization of the web page source code. In the worst case, this could allow arbitrary code execution when opening a malicious page with the style editor tool. This vulnerability affects Firefox ESR < 52.3 and Firefox < 55.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Arch Linux | arch-linux-upgrade-latest | Jul 11, 2025 | Jun 11, 2018 | |
| Centos_linux | — | centos-upgrade-firefoxcentos-upgrade-firefox-debuginfo | Aug 16, 2017 | Aug 8, 2017 |
| Debian | debian-upgrade-firefox-esr | Aug 11, 2017 | Aug 8, 2017 | |
| Freebsd | freebsd-upgrade-package-firefoxfreebsd-upgrade-package-seamonkeyfreebsd-upgrade-package-linux-seamonkeyfreebsd-upgrade-package-firefox-esrfreebsd-upgrade-package-linux-firefoxfreebsd-upgrade-package-libxulfreebsd-upgrade-package-thunderbirdfreebsd-upgrade-package-linux-thunderbird | Aug 8, 2017 | Aug 8, 2017 | |
| Gentoo Linux | gentoo-linux-upgrade-www-client-firefoxgentoo-linux-upgrade-www-client-firefox-bin | Feb 20, 2018 | Feb 20, 2018 | |
| Mfsa2017 18 | mozilla-firefox-upgrade-55_0 | Aug 9, 2017 | Aug 8, 2017 | |
| Mfsa2017 19 | mozilla-firefox-esr-upgrade-52_3 | Aug 9, 2017 | Aug 8, 2017 | |
| Oracle Solaris | oracle-solaris-11-3-upgrade-mail-thunderbird-52-3-0-0-175-3-24-0-4-0oracle-solaris-11-3-upgrade-mail-thunderbird-plugin-thunderbird-lightning-52-3-0-0-175-3-24-0-4-0oracle-solaris-11-3-upgrade-web-browser-firefox-52-3-0-0-175-3-24-0-2-0oracle-solaris-11-3-upgrade-web-browser-firefox-plugin-firefox-java-52-3-0-0-175-3-24-0-2-0oracle-solaris-11-3-upgrade-web-data-firefox-bookmarks-52-3-0-0-175-3-24-0-2-0 | Sep 19, 2017 | Sep 19, 2017 | |
| Oracle_linux | — | oracle-linux-upgrade-firefox | Aug 11, 2017 | Aug 8, 2017 |
| Redhat_linux | — | redhat-upgrade-firefoxredhat-upgrade-firefox-debuginfo | Aug 11, 2017 | Aug 8, 2017 |
| Suse | — | suse-upgrade-mozillafirefoxsuse-upgrade-mozillafirefox-branding-sledsuse-upgrade-mozillafirefox-develsuse-upgrade-mozillafirefox-translationssuse-upgrade-mozillafirefox-translations-commonsuse-upgrade-mozillafirefox-translations-othersuse-upgrade-mozillathunderbirdsuse-upgrade-mozillathunderbird-buildsymbolssuse-upgrade-mozillathunderbird-develsuse-upgrade-mozillathunderbird-translations-commonsuse-upgrade-mozillathunderbird-translations-other | Aug 12, 2017 | Aug 8, 2017 |
| Ubuntu | ubuntu-upgrade-firefox | Aug 16, 2017 | Aug 8, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub