VDB
BDU%3A2018-00171
BDU%3A2018-00171
PUBLISHED
CVSS 7.099999904632568 HIGH
Уязвимость браузеров Mozilla Firefox, Firefox ESR и почтового клиента Thunderbird, связанная с недостатками в реализации SOP (Same-origin policy), позволяющая нарушителю получить несанкционированный доступ к защищаемой информации
Risk Scores
CVSS 2.0
7.099999904632568
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| ООО «РусБИТех-Астра», Red Hat Inc., Canonical Ltd., АО «ИВК», Сообщество свободного программного обеспечения, Novell Inc., Mozilla Corp. | Astra Linux Special Edition (запись в едином реестре российских программ №369), Red Hat Enterprise Linux, Ubuntu, Альт Линукс СПТ (запись в едином реестре российских программ №9), Debian GNU/Linux, OpenSUSE Leap, Suse Linux Enterprise Desktop, SUSE Linux Enterprise Server for SAP Applications, SUSE Linux Enterprise Software Development Kit, Suse Linux Enterprise Server, SUSE Linux Enterprise Module for High Performance Computing, SUSE Linux Enterprise Server for Raspberry Pi, Firefox, Firefox ESR, Thunderbird |
Timeline
- Feb 7, 2018 CVE Published
- Mar 23, 2021 CVE Updated
- Mar 23, 2026 Distribution Patch
- Mar 23, 2026 Distribution Patch
- Mar 23, 2026 Distribution Patch
- Mar 23, 2026 Distribution Patch
- Mar 23, 2026 Security Advisory
References
- https://bugzilla.mozilla.org/show_bug.cgi?id=1322896 url
- https://www.mozilla.org/security/advisories/mfsa2017-19/ advisory
- https://access.redhat.com/security/cve/CVE-2017-7787 advisory
- https://security-tracker.debian.org/tracker/CVE-2017-7787 url
- https://nvd.nist.gov/vuln/detail/CVE-2017-7787 url
- https://usn.ubuntu.com/usn/usn-3391-1 url
- https://usn.ubuntu.com/usn/usn-3416-1 url
- https://wiki.astralinux.ru/pages/viewpage.action?pageId=1212483 url
- https://www.debian.org/security/2017/dsa-3968 url
- https://www.mozilla.org/security/advisories/mfsa2017-18/ advisory
- https://www.mozilla.org/security/advisories/mfsa2017-20/ advisory
- https://www.suse.com/security/cve/CVE-2017-7787/ advisory
- https://cve.basealt.ru/ advisory
- https://www.debian.org/security/2017/dsa-3928 advisory