File downloads encoded with “blob:” and “data:” URL elements bypassed normal file download checks though the Phishing and Malware Protection feature and its block lists of suspicious sites and files. This would allow malicious sites to lure users into downloading executables that would otherwise be detected as suspicious. This vulnerability affects Firefox < 56, Firefox ESR < 52.4, and Thunderbird < 52.4.
[
{
"product": "Firefox",
"vendor": "Mozilla",
"versions": [
{
"lessThan": "56",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
}
]
},
{
"product": "Firefox ESR",
"vendor": "Mozilla",
"versions": [
{
"lessThan": "52.4",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
}
]
},
{
"product": "Thunderbird",
"vendor": "Mozilla",
"versions": [
{
"lessThan": "52.4",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
}
]
}
]
www.securityfocus.com/bid/101059
www.securitytracker.com/id/1039465
access.redhat.com/errata/RHSA-2017:2831
access.redhat.com/errata/RHSA-2017:2885
bugzilla.mozilla.org/show_bug.cgi?id=1376036
lists.debian.org/debian-lts-announce/2017/11/msg00000.html
security.gentoo.org/glsa/201803-14
www.debian.org/security/2017/dsa-3987
www.debian.org/security/2017/dsa-4014
www.mozilla.org/security/advisories/mfsa2017-21/
www.mozilla.org/security/advisories/mfsa2017-22/
www.mozilla.org/security/advisories/mfsa2017-23/