CVE-2017-16541: Infoleak

Published Nov 4, 2017
·
Updated

Browser proxy settings can be bypassed by using the automount feature with autofs to create a mount point on the local file system. Content can be loaded from this mounted file system directly using a file: URI, bypassing configured proxy settings. Note: this issue only affects OS X in default configurations. On Linux systems, autofs must be installed for the vulnerability to occur and Windows is not affected.

Other sources

Tor Browser before 7.0.9 on macOS and Linux allows remote attackers to bypass the intended anonymity feature and discover a client IP address via vectors involving a crafted web site that leverages file:// mishandling in Firefox, aka TorMoil.

Upstream issue:

https://trac.torproject.org/projects/tor/ticket/24052

References:

https://blog.torproject.org/tor-browser-709-released https://www.bleepingcomputer.com/news/security/tormoil-vulnerability-leaks-real-ip-address-from-tor-browser-users/ https://www.wearesegment.com/research/tormoil-torbrowser-unspecified-critical-security-vulnerability/

Red Hat

Tor Browser before 7.0.9 on macOS and Linux allows remote attackers to bypass the intended anonymity feature and discover a client IP address via vectors involving a crafted web site that leverages file:// mishandling in Firefox, aka TorMoil. NOTE: Tails is unaffected.

Affected Software

24 affected componentsFixes available
debian/firefox
121.0-2
debian/firefox-esr
91.12.0esr-1~deb10u1115.6.0esr-1~deb10u1102.15.0esr-1~deb11u1115.6.0esr-1~deb11u1115.5.0esr-1~deb12u1115.6.0esr-1~deb12u1115.6.0esr-1
debian/thunderbird
1:91.12.0-1~deb10u11:115.6.0-1~deb10u11:102.13.1-1~deb11u11:115.6.0-1~deb11u11:115.5.0-1~deb12u11:115.6.0-1~deb12u11:115.6.0-1
Mozilla Thunderbird<60.2.1
60.2.1
Mozilla Firefox<62
62
Mozilla Firefox ESR<60.2
60.2
torproject Tor<7.0.9
Apple macOS
Linux Linux kernel
redhat Enterprise Linux Desktop=6.0
redhat Enterprise Linux Desktop=7.0
redhat Enterprise Linux Eus=7.5
redhat Enterprise Linux Eus=7.6
redhat Enterprise Linux Eus=7.7
redhat Enterprise Linux Server=6.0
redhat Enterprise Linux Server=7.0
redhat Enterprise Linux Server Aus=7.6
redhat Enterprise Linux Server Aus=7.7
redhat Enterprise Linux Server Tus=7.6
redhat Enterprise Linux Server Tus=7.7
redhat Enterprise Linux Workstation=6.0
redhat Enterprise Linux Workstation=7.0
Debian Debian Linux=8.0
Debian Debian Linux=9.0

Event History

Nov 4, 2017
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Nov 8, 2017
Data Sourced
via Red Hat·09:55 AM
DescriptionSeverityAffected Software

Parent advisories

This vulnerability appears in the following advisories.

Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2017-16541?

CVE-2017-16541 has been rated as moderate in severity due to its potential to bypass proxy settings.

2

How do I fix CVE-2017-16541?

To fix CVE-2017-16541, update affected software packages to the recommended versions from your distribution repository.

3

Which software versions are affected by CVE-2017-16541?

CVE-2017-16541 affects multiple versions of Firefox, Firefox ESR, and Thunderbird as specified in the vulnerability details.

4

What environments are impacted by CVE-2017-16541?

CVE-2017-16541 specifically impacts OS X environments under default configurations using certain versions of Firefox and Thunderbird.

5

Can CVE-2017-16541 affect my browsing security?

Yes, CVE-2017-16541 can potentially expose your browsing data by bypassing configured proxy settings, thus risking your online privacy.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203