CVE-2018-5105

3Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackepss 0.4%

probabilidade de exploração

0.4%top 66% das CVEs

exploração observada

nãonenhuma fonte reporta

WebExtensions can bypass user prompts to first save and then open an arbitrarily downloaded file. This can result in an executable file running with local user privileges without explicit user consent. This vulnerability affects Firefox < 58.

Produtos afetados

Mozilla · Firefox

Referências

https://bugzilla.mozilla.org/show_bug.cgi?id=1390882 https://usn.ubuntu.com/3544-1/https://www.mozilla.org/security/advisories/mfsa2018-02/http://www.securityfocus.com/bid/102786 http://www.securitytracker.com/id/1040270