CVE Database
/

CVE-2017-5427

Back to search

CVE-2017-5427

Published: Jun 11, 2018

Modified: Aug 5, 2024

PUBLISHED

Description

A non-existent chrome.manifest file will attempt to be loaded during startup from the primary installation directory. If a malicious user with local access puts chrome.manifest and other referenced files in this directory, they will be loaded and activated during startup. This could result in malicious software being added without consent or modification of referenced installed files. This vulnerability affects Firefox < 52.

VendorProductVersions

Mozilla

Firefox

affected
unspecified - < 52

References

1037966
vdb-entry
x_refsource_SECTRACK
96692
vdb-entry
x_refsource_BID

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now