vulnerability

Ubuntu: (CVE-2017-7844): firefox vulnerability

Try Surface Command

Back to search

Severity

CVSS

(AV:N/AC:M/Au:N/C:P/I:N/A:N)

Published

Jun 11, 2018

Added

Nov 19, 2024

Modified

Mar 27, 2026

Description

A combination of an external SVG image referenced on a page and the coloring of anchor links stored within this image can be used to determine which pages a user has in their history. This can allow a malicious website to query user history. Note: This issue only affects Firefox 57. Earlier releases are not affected. This vulnerability affects Firefox < 57.0.1.

Solution

ubuntu-upgrade-firefox

References

CVE-2017-7844
https://attackerkb.com/topics/CVE-2017-7844
CWE-200
EUVD-EUVD-2017-16819
https://euvd.enisa.europa.eu/vulnerability/EUVD-2017-16819
https://www.cve.org/CVERecord?id=CVE-2017-7844

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report