CVE-2018-5140: Infoleak
Image for moz-icons can be accessed through the "moz-icon:" protocol through script in web content even when otherwise prohibited. This could allow for information leakage of which applications are associated with specific MIME types by a malicious page. This vulnerability affects Firefox < 59.
Other sources
Image for moz-icons can be accessed through the moz-icon: protocol through script in web content even when otherwise prohibited. This could allow for information leakage of which applications are associated with specific MIME types by a malicious page.
Affected Software
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the vulnerability CVE-2018-5140?
The vulnerability CVE-2018-5140 is a security flaw in Firefox versions prior to 59 that allows a malicious page to access the image for moz-icons through the moz-icon: protocol, potentially revealing information about associated applications with specific MIME types.
Which software versions are affected by CVE-2018-5140?
Firefox versions prior to 59 are affected by CVE-2018-5140.
What is the severity of CVE-2018-5140?
CVE-2018-5140 has a severity rating of medium, with a CVSS score of 5.3.
How can I fix the vulnerability CVE-2018-5140?
To fix the vulnerability CVE-2018-5140, users should update their Firefox browser to version 59 or newer.
Are there any references for CVE-2018-5140?
Yes, you can find more information about CVE-2018-5140 at the following references: [1] [2] [3].