The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
On pages containing an iframe, the "data:" protocol can be used to create a modal dialog through Javascript that will have an arbitrary domains as the dialog's location, spoofing of the origin of the modal dialog from the user view. Note: This attack only affects installations with e10 multiprocess turned off. Installations with e10s turned on do not support the modal dialog functionality. This vulnerability affects Firefox < 56.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade firefoxUpgrade thunderbirdUpgrade linux-firefoxUpgrade seamonkeyUpgrade linux-seamonkeyUpgrade libxulUpgrade firefox-esrUpgrade linux-thunderbird | Sep 29, 2017 | Sep 29, 2017 |
| Mfsa2017 21 | — | Upgrade to Mozilla Firefox version 56.0Upgrade to the latest version of Mozilla Firefox | Jul 12, 2018 | Jun 11, 2018 |
| Suse | — | Upgrade MozillaFirefox-translations-otherUpgrade MozillaFirefoxUpgrade MozillaFirefox-translations-common | May 19, 2018 | Sep 28, 2017 |
| Ubuntu | — | Upgrade firefox | Oct 3, 2017 | Sep 28, 2017 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub