Medium severity4.3NVD Advisory· Published Sep 14, 2018· Updated Jun 17, 2026
CVE-2017-16639
CVE-2017-16639
Description
Tor Browser on Windows before 8.0 allows remote attackers to bypass the intended anonymity feature and discover a client IP address, a different vulnerability than CVE-2017-16541. User interaction is required to trigger this vulnerability.
Affected products
3<8.0+ 2 more
- (no CPE)range: <8.0
- cpe:2.3:a:torproject:tor_browser:*:*:*:*:*:*:*:*range: <8.0
- (no CPE)range: <8.0
Patches
Vulnerability mechanics
References
4- packetstormsecurity.com/files/149351/Tor-Browser-SMB-Deanonymization-Information-Disclosure.htmlnvdExploitThird Party AdvisoryVDB Entry
- seclists.org/bugtraq/2018/Sep/29nvdExploitIssue TrackingMailing ListThird Party Advisory
- www.wearesegment.com/research/tor-browser-deanonymization-with-smb/nvdExploitThird Party Advisory
- www.securityfocus.com/bid/105346nvdThird Party AdvisoryVDB Entry
News mentions
0No linked articles in our index yet.