← back
CVE-2017-5383

CVE-2017-5383

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 2.5%
exploitation probability
2.5%top 16% of all CVEs
observed exploitation
nono source reports it
URLs containing certain unicode glyphs for alternative hyphens and quotes do not properly trigger punycode display, allowing for domain name spoofing attacks in the location bar. This vulnerability affects Thunderbird < 45.7, Firefox ESR < 45.7, and Firefox < 51.
Affected products
Mozilla · FirefoxMozilla · Firefox ESRMozilla · Thunderbird
References
http://rhn.redhat.com/errata/RHSA-2017-0190.htmlhttp://rhn.redhat.com/errata/RHSA-2017-0238.htmlhttps://bugzilla.mozilla.org/show_bug.cgi?id=1323338https://bugzilla.mozilla.org/show_bug.cgi?id=1324716https://security.gentoo.org/glsa/201702-13https://security.gentoo.org/glsa/201702-22https://www.debian.org/security/2017/dsa-3771https://www.debian.org/security/2017/dsa-3832https://www.mozilla.org/security/advisories/mfsa2017-01/https://www.mozilla.org/security/advisories/mfsa2017-02/https://www.mozilla.org/security/advisories/mfsa2017-03/http://www.securityfocus.com/bid/95769