Ubuntu.comUB:CVE-2017-7839CVE-2017-7839
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS
Percentile
54.8%
Control characters prepended before “javascript:” URLs pasted in the
addressbar can cause the leading characters to be ignored and the pasted
JavaScript to be executed instead of being blocked. This could be used in
social engineering and self-cross-site-scripting (self-XSS) attacks where
users are convinced to copy and paste text into the addressbar. This
vulnerability affects Firefox < 57.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 17.10 | noarch | firefox | < 57.0+build4-0ubuntu0.17.10.5 | UNKNOWN |
| ubuntu | 18.04 | noarch | firefox | < 57.0.1+build2-0ubuntu1 | UNKNOWN |
| ubuntu | 14.04 | noarch | firefox | < 57.0+build4-0ubuntu0.14.04.4 | UNKNOWN |
| ubuntu | 16.04 | noarch | firefox | < 57.0+build4-0ubuntu0.16.04.5 | UNKNOWN |
| ubuntu | 17.04 | noarch | firefox | < 57.0+build4-0ubuntu0.17.04.5 | UNKNOWN |
Related
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS
Percentile
54.8%