CVE-2018-12381: Medium severity firefox vulnerability
Manually dragging and dropping an Outlook email message into the browser will trigger a page navigation when the message's mail columns are incorrectly interpreted as a URL. Note: this issue only affects Windows operating systems with Outlook installed. Other operating systems are not affected.
Other sources
Manually dragging and dropping an Outlook email message into the browser will trigger a page navigation when the message's mail columns are incorrectly interpreted as a URL. Note: this issue only affects Windows operating systems with Outlook installed. Other operating systems are not affected.. This vulnerability affects Firefox ESR < 60.2 and Firefox < 62.
Affected Software
Remediation
Patch Available
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the severity of CVE-2018-12381?
CVE-2018-12381 has a moderate severity level due to its potential to trigger unintentional page navigation.
How do I fix CVE-2018-12381?
To fix CVE-2018-12381, update Firefox to version 62 or later and Firefox ESR to version 60.2 or later.
Which versions of Firefox are affected by CVE-2018-12381?
CVE-2018-12381 affects Firefox versions prior to 62 and Firefox ESR versions prior to 60.2 on Windows operating systems.
Is CVE-2018-12381 a cross-platform vulnerability?
No, CVE-2018-12381 only affects Windows operating systems with Outlook installed.
What happens if I drag and drop an email into the browser with CVE-2018-12381?
Dragging and dropping an affected Outlook email into the browser may incorrectly interpret the email's columns as a URL, causing unintended navigation.