CVE-2017-7803
3Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 2.0%
probabilidade de exploração
2.0%top 20% das CVEs
exploração observada
nãonenhuma fonte reporta
When a page's content security policy (CSP) header contains a "sandbox" directive, other directives are ignored. This results in the incorrect enforcement of CSP. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55.
Referências
https://access.redhat.com/errata/RHSA-2017:2456https://access.redhat.com/errata/RHSA-2017:2534https://bugzilla.mozilla.org/show_bug.cgi?id=1377426https://security.gentoo.org/glsa/201803-14https://www.debian.org/security/2017/dsa-3928https://www.debian.org/security/2017/dsa-3968https://www.mozilla.org/security/advisories/mfsa2017-18/https://www.mozilla.org/security/advisories/mfsa2017-19/https://www.mozilla.org/security/advisories/mfsa2017-20/http://www.securityfocus.com/bid/100234http://www.securitytracker.com/id/1039124