CVE-2017-5456

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

A mechanism to bypass file system access protections in the sandbox using the file system request constructor through an IPC message. This allows for read and write access to the local file system. This vulnerability affects Firefox ESR < 52.1 and Firefox < 53.

Metrics

CVSS 3.0 9.8/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-732

Affected software

Vendor	Product	Versions
Mozilla	Firefox ESR	>= unspecified, < 52.1
Mozilla	Firefox	>= unspecified, < 53

References

http://www.securityfocus.com/bid/97940Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1038320Third Party Advisory, VDB Entry
https://access.redhat.com/errata/RHSA-2017:1106Third Party Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=1344415Exploit, Issue Tracking, Patch, Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2017-10/Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2017-12/Vendor Advisory
http://www.securityfocus.com/bid/97940Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1038320Third Party Advisory, VDB Entry
https://access.redhat.com/errata/RHSA-2017:1106Third Party Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=1344415Exploit, Issue Tracking, Patch, Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2017-10/Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2017-12/Vendor Advisory

Timeline

Published: Jun 11, 2018
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2017

CVE-2017-54586.1When a "javascript:" URL is drag and dropped by a user into the addressbar, the URL will be processed and executed. This allows for users to CVE-2017-54599.8A buffer overflow in WebGL triggerable by web content, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird CVE-2017-54609.8A use-after-free vulnerability in frame selection triggered by a combination of malicious script content and key presses by a user. This res CVE-2017-54619.8Mozilla Network Security Services (NSS) before 3.21.4, 3.22.x through 3.28.x before 3.28.4, 3.29.x before 3.29.5, and 3.30.x before 3.30.1 a CVE-2017-54625.3A flaw in DRBG number generation within the Network Security Services (NSS) library where the internal state V does not correctly carry bits CVE-2017-54635.3Android intents can be used to launch Firefox for Android in reader mode with a user specified URL. This allows an attacker to spoof the con CVE-2017-54649.8During DOM manipulations of the accessibility tree through script, the DOM tree can become out of sync with the accessibility tree, leading CVE-2017-54659.1An out-of-bounds read while processing SVG content in "ConvolvePixel". This results in a crash and also allows for otherwise inaccessible me CVE-2017-54666.1If a page is loaded from an original site through a hyperlink and contains a redirect to a "data:text/html" URL, triggering a reload will ru CVE-2017-54677.5A potential memory corruption and crash when using Skia content when drawing content outside of the bounds of a clipping region. This vulner CVE-2017-54689.1An issue with incorrect ownership model of "privateBrowsing" information exposed through developer tools. This can result in a non-exploitab CVE-2017-54699.8Fixed potential buffer overflows in generated Firefox code due to CVE-2016-6354 issue in Flex. This vulnerability affects Thunderbird < 52.1