If the "app.support.baseURL" preference is changed by a malicious local program to contain HTML and script content, this content is not sanitized. It will be executed if a user loads "chrome://browser/content/preferences/in-content/preferences.xul" directly in a tab and executes a search. This stored preference is also executed whenever an EME video player plugin displays a CDM-disabled message as a notification message. This vulnerability affects Firefox < 59.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade libxulUpgrade linux-seamonkeyUpgrade linux-firefoxUpgrade thunderbirdUpgrade seamonkeyUpgrade firefox-esrUpgrade waterfoxUpgrade linux-thunderbirdUpgrade firefox | Dec 10, 2025 | Mar 13, 2018 |
| Mfsa2018 06 | — | Upgrade to Mozilla Firefox version 59.0 | Jul 12, 2018 | Jun 11, 2018 |
| Suse | — | Upgrade mozillafirefoxUpgrade mozillafirefox-translations-commonUpgrade mozillafirefox-translations-other | May 22, 2018 | Mar 14, 2018 |
| Ubuntu | — | Upgrade firefox | Apr 26, 2018 | Mar 14, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub