CVE-2018-5105

EPSS 0.07%
Veröffentlicht 11.06.2018 21:29:13
Zuletzt bearbeitet 21.11.2024 04:08:06
Quelle security@mozilla.org
CVE-Watchlists
Login
Unerledigt
Login

WebExtensions can bypass user prompts to first save and then open an arbitrarily downloaded file. This can result in an executable file running with local user privileges without explicit user consent. This vulnerability affects Firefox < 58.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 0 Referenzen 8

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Mozilla ≫ Firefox Version <= 57.0.4

Canonical ≫ Ubuntu Linux Version14.04 SwEditionlts

Canonical ≫ Ubuntu Linux Version16.04 SwEditionlts

Canonical ≫ Ubuntu Linux Version17.10

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.07%	0.211

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	7.8	1.8	5.9	CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
nvd@nist.gov	7.2	3.9	10	AV:L/AC:L/Au:N/C:C/I:C/A:C

http://www.securitytracker.com/id/1040270

Third Party Advisory

VDB Entry

https://usn.ubuntu.com/3544-1/

Third Party Advisory

https://www.mozilla.org/security/advisories/mfsa2018-02/

Vendor Advisory

http://www.securityfocus.com/bid/102786

Third Party Advisory

VDB Entry

https://bugzilla.mozilla.org/show_bug.cgi?id=1390882

Issue Tracking

Permissions Required

https://nvd.nist.gov/vuln/detail/CVE-2018-5105

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2018-5105

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2018-5105

EUVD