CVE-2017-7844: Infoleak

Reference Links

• https://bugzilla.mozilla.org/show_bug.cgi?id=1420001
• https://www.mozilla.org/en-US/security/advisories/mfsa2017-27/
• https://www.mozilla.org/en-US/security/advisories/mfsa2017-27/#CVE-2017-7843
• http://www.securityfocus.com/bid/102039
• http://www.securitytracker.com/id/1039954
• https://www.mozilla.org/security/advisories/mfsa2017-27/

Parent vulnerabilities

(Appears in the following advisories)

• MFSA2017-27

Peer vulnerabilities

(Found alongside the following vulnerabilities)

• CVE-2017-7843
• CVE-2017-7844

Frequently Asked Questions

• What is CVE-2017-7844?

  CVE-2017-7844 is a vulnerability in Mozilla Firefox that allows a malicious website to query user history.

• Which versions of Mozilla Firefox are affected by CVE-2017-7844?

  Mozilla Firefox versions up to and including 57.0.1 are affected by CVE-2017-7844.

• How can a malicious website exploit CVE-2017-7844?

  By using a combination of an external SVG image and the coloring of anchor links stored within the image, a malicious website can determine the user's browsing history.

• What is the severity level of CVE-2017-7844?

  CVE-2017-7844 has a severity level of 6.5 (high).

• How to fix the CVE-2017-7844 vulnerability?

  Upgrade to Mozilla Firefox version 57.0.1 or later to fix the CVE-2017-7844 vulnerability.