Vulnerability Name: | CVE-2017-7820 (CCN-132759) | ||||||||||||||||||||||||||||||||||||||||
Assigned: | 2017-09-28 | ||||||||||||||||||||||||||||||||||||||||
Published: | 2017-09-28 | ||||||||||||||||||||||||||||||||||||||||
Updated: | 2019-10-03 | ||||||||||||||||||||||||||||||||||||||||
Summary: | The "instanceof" operator can bypass the Xray wrapper mechanism. When called on web content from the browser itself or an extension the web content can provide its own result for that operator, possibly tricking the browser or extension into mishandling the element. This vulnerability affects Firefox < 56. | ||||||||||||||||||||||||||||||||||||||||
CVSS v3 Severity: | 5.3 Medium (CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) 4.6 Medium (Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N/E:U/RL:O/RC:C)
5.7 Medium (CCN Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C)
| ||||||||||||||||||||||||||||||||||||||||
CVSS v2 Severity: | 5.0 Medium (CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N)
| ||||||||||||||||||||||||||||||||||||||||
Vulnerability Type: | CWE-noinfo | ||||||||||||||||||||||||||||||||||||||||
Vulnerability Consequences: | Bypass Security | ||||||||||||||||||||||||||||||||||||||||
References: | Source: MITRE Type: CNA CVE-2017-7820 Source: BID Type: Third Party Advisory, VDB Entry 101057 Source: CCN Type: BID-101057 Mozilla Firefox Multiple Security Vulnerabilities Source: SECTRACK Type: Third Party Advisory, VDB Entry 1039465 Source: CONFIRM Type: Exploit, Issue Tracking https://bugzilla.mozilla.org/show_bug.cgi?id=1378207 Source: XF Type: UNKNOWN firefox-cve20177820-sec-bypass(132759) Source: CCN Type: Mozilla Foundation Security Advisory 2017-21 Security vulnerabilities fixed in Firefox 56 Source: CONFIRM Type: Vendor Advisory https://www.mozilla.org/security/advisories/mfsa2017-21/ | ||||||||||||||||||||||||||||||||||||||||
Vulnerable Configuration: | Configuration 1: Configuration CCN 1: Denotes that component is vulnerable | ||||||||||||||||||||||||||||||||||||||||
Oval Definitions | |||||||||||||||||||||||||||||||||||||||||
| |||||||||||||||||||||||||||||||||||||||||
BACK |