Oval Definition:oval:org.cisecurity:def:1922
Revision Date:2017-03-03Version:3
Title:Certificate Viewer exporting can be used to navigate and save to arbitrary filesystem locations - CVE-2017-5381
Description:The "export" function in the Certificate Viewer can force local filesystem navigation when the "common name" in a certificate contains slashes, allowing certificate content to be saved in unsafe locations with an arbitrary filename.
Family:windowsClass:vulnerability
Status:DRAFTReference(s):CVE-2017-5381
Platform(s):Microsoft Windows 10
Microsoft Windows 7
Microsoft Windows 8
Microsoft Windows 8.1
Microsoft Windows Server 2003
Microsoft Windows Server 2008
Microsoft Windows Server 2008 R2
Microsoft Windows Server 2012
Microsoft Windows Server 2012 R2
Microsoft Windows Server 2016
Microsoft Windows Vista
Microsoft Windows XP
Product(s):Mozilla Firefox
Definition Synopsis
  • Mozilla Firefox Mainline release is installed
  • AND Check if Mozilla Firefox Mainline version less than 51.0.0
  • BACK