9.8crit
CVE-2017-5397
The cache directory on the local file system is set to be world writable.
Published 8 y ago · modified 4 mo ago · JSON
CVSS
9.8
v3.0 · NVD
CISA KEV
No
not known exploited
EPSS
3.6%
percentile 90%
Public exploits
0
none known
Summary
The cache directory on the local file system is set to be world writable. Firefox defaults to extracting libraries from this cache. This allows for the possibility of an installed malicious application or tools with write access to the file system to replace files used by Firefox with their own versions. This vulnerability affects Firefox < 51.0.3.
Exploit prediction (EPSS)
3.62% probability of exploitation in the next 30 days, higher than 90% of all scored CVEs.
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| NVD | 3.0 | 9.8 | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| NVD | 2.0 | 10.0 | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Affected products
- Mozilla Firefox
Classification
- Weakness
- CWE-829 Inclusion of Functionality from Untrusted Control Sphere
References
- bugzilla.mozilla.org /show_bug.cgi?id=1337304 · x_refsource_CONFIRM, x_transferred
- securityfocus.com /bid/96144 · vdb-entry, x_refsource_BID, x_transferred
- mozilla.org /security/advisories/mfsa2017-04/ · x_refsource_CONFIRM, x_transferred
Sources
- CVE List: CVE-2017-5397
- NVD: CVE-2017-5397
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.