CVE-2017-5408: Infoleak
Video files loaded video captions cross-origin without checking for the presence of CORS headers permitting such cross-origin use, leading to potential information disclosure for video captions.
Affected Software
Remediation
Patch Available
Event History
Parent advisories
This vulnerability appears in the following advisories.
Peer vulnerabilities
Found alongside the following vulnerabilities.
- CVE-2017-5400
- CVE-2017-5401
- CVE-2017-5402
- CVE-2017-5404
- CVE-2017-5407
- CVE-2017-5410
- CVE-2017-5408
- CVE-2017-5405
- CVE-2017-5398
- CVE-2017-5403
- CVE-2017-5406
- CVE-2017-5411
- CVE-2017-5412
- CVE-2017-5413
- CVE-2017-5414
- CVE-2017-5416
- CVE-2017-5425
- CVE-2017-5426
- CVE-2017-5418
- CVE-2017-5419
- CVE-2017-5421
- CVE-2017-5422
- CVE-2017-5399
- CVE-2017-5409
- CVE-2017-5415
- CVE-2017-5417
- CVE-2017-5427
- CVE-2017-5420
Frequently Asked Questions
What is the severity of CVE-2017-5408?
CVE-2017-5408 is categorized as a medium severity vulnerability due to its potential for information disclosure.
How do I fix CVE-2017-5408?
To fix CVE-2017-5408, update affected software to the latest version beyond the specified vulnerable version.
Which products are affected by CVE-2017-5408?
CVE-2017-5408 affects Mozilla Thunderbird versions prior to 45.8, Firefox ESR versions prior to 45.8, and various versions of Debian and Red Hat Enterprise Linux.
What is the impact of CVE-2017-5408?
The impact of CVE-2017-5408 includes potential information leakage from video captions that can be accessed cross-origin.
What type of vulnerability is CVE-2017-5408?
CVE-2017-5408 is a cross-origin resource sharing (CORS) vulnerability related to improper validation of CORS headers.