medium4.3
CVE-2017-7847
Crafted CSS in an RSS feed can leak and reveal local path strings, which may contain user name.
Impact
Crafted CSS in an RSS feed can leak and reveal local path strings, which may contain user name. This vulnerability affects Thunderbird < 52.5.2.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Debian | Debian Linux | Versions 7.0, 8.0, 9.0 |
| Redhat | Enterprise Linux Aus | Version 7.4 |
| Redhat | Enterprise Linux Desktop | Versions 6.0, 7.0 |
| Redhat | Enterprise Linux Eus | Versions 7.4, 7.5 |
| Redhat | Enterprise Linux Server | Versions 6.0, 7.0 |
| Redhat | Enterprise Linux Workstation | Versions 6.0, 7.0 |
| Mozilla | Thunderbird | before 52.5.2 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/102258
- http://www.securitytracker.com/id/1040123
- https://access.redhat.com/errata/RHSA-2018:0061
- https://bugzilla.mozilla.org/show_bug.cgi?id=1411708
- https://lists.debian.org/debian-lts-announce/2017/12/msg00026.html
- https://www.debian.org/security/2017/dsa-4075
- https://www.mozilla.org/security/advisories/mfsa2017-30/
- http://www.securityfocus.com/bid/102258
- http://www.securitytracker.com/id/1040123
- https://access.redhat.com/errata/RHSA-2018:0061
- https://bugzilla.mozilla.org/show_bug.cgi?id=1411708
- https://lists.debian.org/debian-lts-announce/2017/12/msg00026.html
- https://www.debian.org/security/2017/dsa-4075
- https://www.mozilla.org/security/advisories/mfsa2017-30/