CVE-2017-5414: Infoleak
The file picker dialog can choose and display the wrong local default directory when instantiated. On some operating systems, this can lead to information disclosure, such as the operating system or the local account name.
Affected Software
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
- CVE-2017-5400
- CVE-2017-5401
- CVE-2017-5402
- CVE-2017-5403
- CVE-2017-5404
- CVE-2017-5406
- CVE-2017-5407
- CVE-2017-5410
- CVE-2017-5411
- CVE-2017-5409
- CVE-2017-5408
- CVE-2017-5412
- CVE-2017-5413
- CVE-2017-5414
- CVE-2017-5415
- CVE-2017-5416
- CVE-2017-5417
- CVE-2017-5425
- CVE-2017-5426
- CVE-2017-5427
- CVE-2017-5418
- CVE-2017-5419
- CVE-2017-5420
- CVE-2017-5405
- CVE-2017-5421
- CVE-2017-5422
- CVE-2017-5399
- CVE-2017-5398
Frequently Asked Questions
What is the severity of CVE-2017-5414?
The severity of CVE-2017-5414 is classified as moderate, as it may lead to information disclosure.
How do I fix CVE-2017-5414?
To fix CVE-2017-5414, update Mozilla Firefox or Thunderbird to version 52.0 or later.
What types of software are affected by CVE-2017-5414?
CVE-2017-5414 affects Mozilla Firefox and Mozilla Thunderbird versions prior to 52.0.
What is the impact of CVE-2017-5414 on users?
The impact of CVE-2017-5414 includes potential disclosure of sensitive information like the operating system and local account names.
Is there a workaround for CVE-2017-5414?
There is no official workaround for CVE-2017-5414; the best course of action is to apply the security update.