CVE-2017-7787: Infoleak
Same-origin policy protections can be bypassed on pages with embedded iframes during page reloads, allowing the iframes to access content on the top level page, leading to information disclosure.
Affected Software
Event History
Parent advisories
This vulnerability appears in the following advisories.
Peer vulnerabilities
Found alongside the following vulnerabilities.
- CVE-2017-7800
- CVE-2017-7801
- CVE-2017-7809
- CVE-2017-7784
- CVE-2017-7802
- CVE-2017-7785
- CVE-2017-7786
- CVE-2017-7753
- CVE-2017-7787
- CVE-2017-7807
- CVE-2017-7792
- CVE-2017-7804
- CVE-2017-7791
- CVE-2017-7782
- CVE-2017-7803
- CVE-2017-7779
- CVE-2017-7798
- CVE-2017-7806
- CVE-2017-7808
- CVE-2017-7781
- CVE-2017-7794
- CVE-2017-7799
- CVE-2017-7783
- CVE-2017-7788
- CVE-2017-7789
- CVE-2017-7790
- CVE-2017-7796
- CVE-2017-7797
- CVE-2017-7780
Frequently Asked Questions
What is the severity of CVE-2017-7787?
CVE-2017-7787 has a moderate severity rating due to its ability to bypass same-origin policy protections.
How do I fix CVE-2017-7787?
To fix CVE-2017-7787, update to the latest versions of affected software such as Firefox or Thunderbird.
Which software is affected by CVE-2017-7787?
CVE-2017-7787 affects Firefox, Firefox ESR, and Thunderbird versions prior to their specified fixes.
What does CVE-2017-7787 exploit?
CVE-2017-7787 exploits vulnerabilities in embedded iframes during page reloads to access top level page content.
Is there a workaround for CVE-2017-7787?
There is no specific workaround for CVE-2017-7787; updating to a patched version is the recommended solution.