CVE-2017-7812: Infoleak
If web content on a page is dragged onto portions of the browser UI, such as the tab bar, links can be opened that otherwise would not be allowed to open. This can allow malicious web content to open a locally stored file through "file:" URLs. This vulnerability affects Firefox < 56.
Other sources
If web content on a page is dragged onto portions of the browser UI, such as the tab bar, links can be opened that otherwise would not be allowed to open. This can allow malicious web content to open a locally stored file through file: URLs.
Affected Software
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the severity of CVE-2017-7812?
The severity of CVE-2017-7812 is medium with a severity value of 5.3.
How does CVE-2017-7812 affect Firefox?
CVE-2017-7812 affects Firefox versions up to and excluding 56.
How can malicious web content exploit CVE-2017-7812?
Malicious web content can exploit CVE-2017-7812 by opening locally stored files through "file:" URLs when dragged onto portions of the Firefox UI, such as the tab bar.
What is the remedy for CVE-2017-7812 in Firefox?
The remedy for CVE-2017-7812 in Firefox is to update to version 56 or higher.
Where can I find more information about CVE-2017-7812?
You can find more information about CVE-2017-7812 at the following references: [Bugzilla](https://bugzilla.mozilla.org/show_bug.cgi?id=1379842), [Mozilla Security Advisory](https://www.mozilla.org/en-US/security/advisories/mfsa2017-21/), and [SecurityFocus](http://www.securityfocus.com/bid/101057).