Security Advisory

CVE-2017-5425

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2018-06-11 21:00:00

Last updated 2024-08-05 15:04:13

Assigner mozilla

CVSS score not scored

State PUBLISHED

Description

The Gecko Media Plugin sandbox allows access to local files that match specific regular expressions. On OS OX, this matching allows access to some data in subdirectories of "/private/var" that could expose personal or temporary data. This has been updated to not allow access to "/private/var" and its subdirectories. Note: this issue only affects OS X. Other operating systems are not affected. This vulnerability affects Firefox < 52 and Thunderbird < 52.

← Browse all CVEs View on cve.org ↗