vulnerability

MFSA2017-05 Firefox: Security vulnerabilities fixed in Firefox 52 (CVE-2017-5417)

Try Surface Command

Back to search

Severity

CVSS

(AV:N/AC:L/Au:N/C:N/I:P/A:N)

Published

Mar 7, 2017

Added

Mar 8, 2017

Modified

Mar 27, 2026

Description

When dragging content from the primary browser pane to the addressbar on a malicious site, it is possible to change the addressbar so that the displayed location following navigation does not match the URL of the newly loaded page. This allows for spoofing attacks. This vulnerability affects Firefox < 52.

Solution

mozilla-firefox-upgrade-52_0

References

CVE-2017-5417
https://attackerkb.com/topics/CVE-2017-5417
CWE-20
EUVD-EUVD-2017-14521
http://www.mozilla.org/security/announce/2017/mfsa2017-05.html
https://euvd.enisa.europa.eu/vulnerability/EUVD-2017-14521

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report