CVE-2017-16541: Infoleak
Browser proxy settings can be bypassed by using the automount feature with autofs to create a mount point on the local file system. Content can be loaded from this mounted file system directly using a file: URI, bypassing configured proxy settings. Note: this issue only affects OS X in default configurations. On Linux systems, autofs must be installed for the vulnerability to occur and Windows is not affected.
Other sources
Tor Browser before 7.0.9 on macOS and Linux allows remote attackers to bypass the intended anonymity feature and discover a client IP address via vectors involving a crafted web site that leverages file:// mishandling in Firefox, aka TorMoil.
Upstream issue:
https://trac.torproject.org/projects/tor/ticket/24052
References:
https://blog.torproject.org/tor-browser-709-released https://www.bleepingcomputer.com/news/security/tormoil-vulnerability-leaks-real-ip-address-from-tor-browser-users/ https://www.wearesegment.com/research/tormoil-torbrowser-unspecified-critical-security-vulnerability/
— Red Hat
Tor Browser before 7.0.9 on macOS and Linux allows remote attackers to bypass the intended anonymity feature and discover a client IP address via vectors involving a crafted web site that leverages file:// mishandling in Firefox, aka TorMoil. NOTE: Tails is unaffected.
Affected Software
Event History
Parent advisories
This vulnerability appears in the following advisories.
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the severity of CVE-2017-16541?
CVE-2017-16541 has been rated as moderate in severity due to its potential to bypass proxy settings.
How do I fix CVE-2017-16541?
To fix CVE-2017-16541, update affected software packages to the recommended versions from your distribution repository.
Which software versions are affected by CVE-2017-16541?
CVE-2017-16541 affects multiple versions of Firefox, Firefox ESR, and Thunderbird as specified in the vulnerability details.
What environments are impacted by CVE-2017-16541?
CVE-2017-16541 specifically impacts OS X environments under default configurations using certain versions of Firefox and Thunderbird.
Can CVE-2017-16541 affect my browsing security?
Yes, CVE-2017-16541 can potentially expose your browsing data by bypassing configured proxy settings, thus risking your online privacy.