Multiple vulnerabilities in Mozilla Firefox

Description

Multiple serious vulnerabilities have been found in Firefox. Malicious users can exploit these vulnerabilities to obtain sensitive information.

1. A vulnerability in IndexedDB component can be exploited remotelly to obtain sensitive information;
2. A rendering of external SVG images and anchor links can be exploited remotelly to obtain sensitive information;

---

Technical details

Vulnerability(2) only affects Mozilla Firefox 57.

NB: This vulnerability does not have any public CVSS rating, so rating can be changed by the time.

Original advisories

• Mozilla Foundation Security Advisory 2017-27

Related products

• Mozilla-Firefox

CVE list

• CVE-2017-7844
  warning
• CVE-2017-7843
  warning

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com