Unrated severityNVD Advisory· Published Jun 11, 2018· Updated Aug 5, 2024

CVE-2017-5451

Description

A mechanism to spoof the addressbar through the user interaction on the addressbar and the "onblur" event. The event could be used by script to affect text display to make the loaded site appear to be different from the one actually loaded within the addressbar. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 52.1, and Firefox < 53.

Affected products

osv-coords47 versions
pkg:rpm/suse/firefox-gcc5&distro=SUSE%20Linux%20Enterprise%20Point%20of%20Sale%2011%20SP3 pkg:rpm/suse/firefox-gcc5&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP3-LTSS pkg:rpm/suse/firefox-gcc5&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP3-TERADATA pkg:rpm/suse/firefox-gcc5&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4 pkg:rpm/suse/firefox-gcc5&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2011%20SP4 pkg:rpm/suse/firefox-libffi-gcc5&distro=SUSE%20Linux%20Enterprise%20Point%20of%20Sale%2011%20SP3 pkg:rpm/suse/firefox-libffi-gcc5&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP3-LTSS pkg:rpm/suse/firefox-libffi-gcc5&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP3-TERADATA pkg:rpm/suse/firefox-libffi-gcc5&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4 pkg:rpm/suse/firefox-libffi-gcc5&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2011%20SP4 pkg:rpm/suse/MozillaFirefox-branding-SLED&distro=SUSE%20Linux%20Enterprise%20Point%20of%20Sale%2011%20SP3 pkg:rpm/suse/MozillaFirefox-branding-SLED&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP3-LTSS pkg:rpm/suse/MozillaFirefox-branding-SLED&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP3-TERADATA pkg:rpm/suse/MozillaFirefox-branding-SLED&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4 pkg:rpm/suse/MozillaFirefox-branding-SLED&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2011%20SP4 pkg:rpm/suse/MozillaFirefox-branding-SLE&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP2 pkg:rpm/suse/MozillaFirefox-branding-SLE&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP1-LTSS pkg:rpm/suse/MozillaFirefox-branding-SLE&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2 pkg:rpm/suse/MozillaFirefox-branding-SLE&distro=SUSE%20Linux%20Enterprise%20Server%2012-LTSS pkg:rpm/suse/MozillaFirefox-branding-SLE&distro=SUSE%20Linux%20Enterprise%20Server%20for%20Raspberry%20Pi%2012%20SP2 pkg:rpm/suse/MozillaFirefox-branding-SLE&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012 pkg:rpm/suse/MozillaFirefox-branding-SLE&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP1 pkg:rpm/suse/MozillaFirefox-branding-SLE&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP2 pkg:rpm/suse/MozillaFirefox-branding-SLE&distro=SUSE%20OpenStack%20Cloud%206 pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP2 pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Point%20of%20Sale%2011%20SP3 pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP3-LTSS pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP3-TERADATA pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4 pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP1-LTSS pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2 pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%2012-LTSS pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%20for%20Raspberry%20Pi%2012%20SP2 pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2011%20SP4 pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012 pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP1 pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP2 pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2011%20SP4 pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP2 pkg:rpm/suse/MozillaFirefox&distro=SUSE%20OpenStack%20Cloud%206 pkg:rpm/suse/mozilla-nss&distro=SUSE%20Linux%20Enterprise%20Point%20of%20Sale%2011%20SP3 pkg:rpm/suse/mozilla-nss&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP3-LTSS pkg:rpm/suse/mozilla-nss&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP3-TERADATA pkg:rpm/suse/mozilla-nss&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4 pkg:rpm/suse/mozilla-nss&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2011%20SP4 pkg:rpm/suse/mozilla-nss&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2011%20SP4 pkg:rpm/suse/MozillaThunderbird&distro=SUSE%20Package%20Hub%2012
< 5.3.1+r233831-7.1+ 46 more
- (no CPE)range: < 5.3.1+r233831-7.1
- (no CPE)range: < 5.3.1+r233831-7.1
- (no CPE)range: < 5.3.1+r233831-7.1
- (no CPE)range: < 5.3.1+r233831-7.1
- (no CPE)range: < 5.3.1+r233831-7.1
- (no CPE)range: < 5.3.1+r233831-7.1
- (no CPE)range: < 5.3.1+r233831-7.1
- (no CPE)range: < 5.3.1+r233831-7.1
- (no CPE)range: < 5.3.1+r233831-7.1
- (no CPE)range: < 5.3.1+r233831-7.1
- (no CPE)range: < 52-24.3.44
- (no CPE)range: < 52-24.3.44
- (no CPE)range: < 52-24.3.44
- (no CPE)range: < 52-24.3.44
- (no CPE)range: < 52-24.3.44
- (no CPE)range: < 52-31.1
- (no CPE)range: < 52-31.1
- (no CPE)range: < 52-31.1
- (no CPE)range: < 52-31.1
- (no CPE)range: < 52-31.1
- (no CPE)range: < 52-31.1
- (no CPE)range: < 52-31.1
- (no CPE)range: < 52-31.1
- (no CPE)range: < 52-31.1
- (no CPE)range: < 52.2.0esr-108.3
- (no CPE)range: < 52.2.0esr-72.5.2
- (no CPE)range: < 52.2.0esr-72.5.2
- (no CPE)range: < 52.2.0esr-72.5.2
- (no CPE)range: < 52.2.0esr-72.5.2
- (no CPE)range: < 52.2.0esr-108.3
- (no CPE)range: < 52.2.0esr-108.3
- (no CPE)range: < 52.2.0esr-108.3
- (no CPE)range: < 52.2.0esr-108.3
- (no CPE)range: < 52.2.0esr-72.5.2
- (no CPE)range: < 52.2.0esr-108.3
- (no CPE)range: < 52.2.0esr-108.3
- (no CPE)range: < 52.2.0esr-108.3
- (no CPE)range: < 52.2.0esr-72.5.2
- (no CPE)range: < 52.2.0esr-108.3
- (no CPE)range: < 52.2.0esr-108.3
- (no CPE)range: < 3.29.5-47.3.2
- (no CPE)range: < 3.29.5-47.3.2
- (no CPE)range: < 3.29.5-47.3.2
- (no CPE)range: < 3.29.5-47.3.2
- (no CPE)range: < 3.29.5-47.3.2
- (no CPE)range: < 3.29.5-47.3.2
- (no CPE)range: < 52.1.0-30.1
Mozilla Corporation/Firefoxv5
Range: unspecified
Mozilla Corporation/Thunderbirdv5
Range: unspecified
Mozilla/Firefox ESRv5
Range: unspecified

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

access.redhat.com/errata/RHSA-2017:1106mitrevendor-advisoryx_refsource_REDHAT
access.redhat.com/errata/RHSA-2017:1201mitrevendor-advisoryx_refsource_REDHAT
www.securityfocus.com/bid/97940mitrevdb-entryx_refsource_BID
www.securitytracker.com/id/1038320mitrevdb-entryx_refsource_SECTRACK
bugzilla.mozilla.org/show_bug.cgimitrex_refsource_CONFIRM
www.mozilla.org/security/advisories/mfsa2017-10/mitrex_refsource_CONFIRM
www.mozilla.org/security/advisories/mfsa2017-12/mitrex_refsource_CONFIRM
www.mozilla.org/security/advisories/mfsa2017-13/mitrex_refsource_CONFIRM

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000