CVE-2017-5425

The Gecko Media Plugin sandbox allows access to local files that match specific regular expressions

published June 11, 2018

CVSS
—
EPSS
2%
Percentile
79.8
In the wild
Unconfirmed
What it is

The Gecko Media Plugin sandbox allows access to local files that match specific regular expressions. On OS OX, this matching allows access to some data in subdirectories of "/private/var" that could expose personal or temporary data. This has been updated to not allow access to "/private/var" and its subdirectories. Note: this issue only affects OS X. Other operating systems are not affected. This vulnerability affects Firefox < 52 and Thunderbird < 52.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01930 · 79.8th percentile
Published
2018-06-11T21:00Z
EPSS history
Timeline
  • 11 JUN 21:00Z
    The Gecko Media Plugin sandbox allows access to local files that match specific regular expressions
    cvelistv5