CVE Database
/

CVE-2017-5425

Back to search

CVE-2017-5425

Published: Jun 11, 2018

Modified: Aug 5, 2024

PUBLISHED

Description

The Gecko Media Plugin sandbox allows access to local files that match specific regular expressions. On OS OX, this matching allows access to some data in subdirectories of "/private/var" that could expose personal or temporary data. This has been updated to not allow access to "/private/var" and its subdirectories. Note: this issue only affects OS X. Other operating systems are not affected. This vulnerability affects Firefox < 52 and Thunderbird < 52.

VendorProductVersions

Mozilla

Firefox

affected
unspecified - < 52

Mozilla

Thunderbird

affected
unspecified - < 52

References

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now