vulnerability

MFSA2018-02 Firefox: Security vulnerabilities fixed in Firefox 58 (CVE-2018-5118)

Try Surface Command

Back to search

Severity

CVSS

(AV:N/AC:L/Au:N/C:P/I:N/A:N)

Published

Jan 23, 2018

Added

Jan 24, 2018

Modified

Mar 27, 2026

Description

The screenshot images displayed in the Activity Stream page displayed when a new tab is opened is created from the meta tags of websites. An issue was discovered where the page could attempt to create these images through "file:" URLs from the local file system. This loading is blocked by the sandbox but could expose local data if combined with another attack that escapes sandbox protections. This vulnerability affects Firefox < 58.

Solution

mozilla-firefox-upgrade-58_0

References

CVE-2018-5118
https://attackerkb.com/topics/CVE-2018-5118
CWE-200
EUVD-EUVD-2018-16904
http://www.mozilla.org/security/announce/2018/mfsa2018-02.html
https://euvd.enisa.europa.eu/vulnerability/EUVD-2018-16904

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report