CVE-2018-5105 | BDVDB-2026-102385 Detail

MozillaFirefox

Description#

WebExtensions can bypass user prompts to first save and then open an arbitrarily downloaded file. This can result in an executable file running with local user privileges without explicit user consent. This vulnerability affects Firefox < 58.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securitytracker.com/id/1040270
https://bugzilla.mozilla.org/show_bug.cgi?id=1390882
https://usn.ubuntu.com/3544-1/
http://www.securityfocus.com/bid/102786
https://www.mozilla.org/security/advisories/mfsa2018-02/

Exploit#

No public exploit known

History#

Version 12018-06-11Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.