CVE-2017-5397

The cache directory on the local file system is set to be world writable

published June 11, 2018

CVSS
—
EPSS
4%
Percentile
89.4
In the wild
Unconfirmed
What it is

⚠️ A world-writable cache directory? That's like leaving your front door wide open! 🏠 Imagine a restaurant where anyone can walk into the kitchen and swap out the chef's special with their own mystery dish. In this case, malicious applications can replace Firefox's critical files with their own versions, leading to unpredictable consequences. If an attacker gets in, they could replace essential libraries used by Firefox, potentially compromising user privacy and security. Imagine browsing the web while a sneaky impostor is serving you up some unwelcome surprises!

Put simply

Imagine a restaurant where anyone can walk into the kitchen and swap out the chef's special with their own mystery dish. In this case, malicious applications can replace Firefox's critical files with their own versions, leading to unpredictable consequences. This vulnerability allows unauthorized write access to the cache directory on the local file system, enabling apps with file system access to modify Firefox's libraries. This occurs in Firefox versions prior to 51.0.3.

What to do

If an attacker gets in, they could replace essential libraries used by Firefox, potentially compromising user privacy and security. Imagine browsing the web while a sneaky impostor is serving you up some unwelcome surprises! To mitigate this risk, ensure that your Firefox is updated to version 51.0.3 or later. Additionally, check your file permissions to restrict access to the cache directory as needed. Fixing this is straightforward! Update your browser and tighten those file permissions—you've got this! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03623 · 89.4th percentile
Published
2018-06-11T21:00Z
EPSS history
Timeline
  • 11 JUN 21:00Z
    The cache directory on the local file system is set to be world writable
    cvelistv5