CVE-2018-12381 PUBLISHED

Reported by mozilla · Published October 18, 2018

Manually dragging and dropping an Outlook email message into the browser will trigger a page navigation when the message's mail columns are incorrectly interpreted as a URL. *Note: this issue only affects Windows operating systems with Outlook installed. Other operating systems are not affected.*. This vulnerability affects Firefox ESR < 60.2 and Firefox < 62.

Affected Products

VendorProductVersions
MozillaFirefox ESRunspecified
MozillaFirefoxunspecified
MozillaFirefox ESRunspecified
MozillaFirefoxunspecified

Timeline

References

Open in Interactive Console →