A vulnerability where WebExtensions can download and attempt to open a file of some non-executable file types. This can be triggered without specific user interaction for the file download and open actions. This could be used to trigger known vulnerabilities in the programs that handle those document types. This vulnerability affects Firefox < 56.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade seamonkeyUpgrade linux-firefoxUpgrade firefox-esrUpgrade linux-seamonkeyUpgrade libxulUpgrade linux-thunderbirdUpgrade firefoxUpgrade thunderbird | Sep 29, 2017 | Sep 29, 2017 |
| Mfsa2017 21 | — | Upgrade to Mozilla Firefox version 56.0Upgrade to the latest version of Mozilla Firefox | Jul 12, 2018 | Jun 11, 2018 |
| Suse | — | Upgrade MozillaFirefoxUpgrade MozillaFirefox-translations-commonUpgrade MozillaFirefox-translations-other | May 20, 2018 | Sep 28, 2017 |
| Ubuntu | — | Upgrade firefox | Oct 3, 2017 | Sep 28, 2017 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub