CVE-2017-5391: Critical severity firefox vulnerability
Special "about:" pages used by web content, such as RSS feeds, can load privileged "about:" pages in an iframe. If a content-injection bug were found in one of those pages this could allow for potential privilege escalation. This vulnerability affects Firefox < 51.
Other sources
Special about: pages used by web content, such as RSS feeds, can load privileged about: pages in an iframe. If a content-injection bug were found in one of those pages this could allow for potential privilege escalation.
Affected Software
Remediation
Patch Available
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
- CVE-2017-5375
- CVE-2017-5376
- CVE-2017-5377
- CVE-2017-5378
- CVE-2017-5379
- CVE-2017-5380
- CVE-2017-5390
- CVE-2017-5389
- CVE-2017-5396
- CVE-2017-5381
- CVE-2017-5382
- CVE-2017-5383
- CVE-2017-5384
- CVE-2017-5385
- CVE-2017-5386
- CVE-2017-5394
- CVE-2017-5391
- CVE-2017-5392
- CVE-2017-5393
- CVE-2017-5395
- CVE-2017-5387
- CVE-2017-5388
- CVE-2017-5374
- CVE-2017-5373
Frequently Asked Questions
What is the severity of CVE-2017-5391?
CVE-2017-5391 has a medium severity rating due to its potential for privilege escalation in Firefox versions prior to 51.
How do I fix CVE-2017-5391?
To fix CVE-2017-5391, upgrade Firefox to version 51 or later.
Which versions of Firefox are affected by CVE-2017-5391?
Firefox versions prior to 51 are affected by CVE-2017-5391.
What type of exploitation is possible with CVE-2017-5391?
CVE-2017-5391 can potentially be exploited to allow content injection leading to privilege escalation.
Is there a workaround for CVE-2017-5391?
There are no known workarounds for CVE-2017-5391 other than updating Firefox to a secure version.