CVE-2018-5105

WebExtensions can bypass user prompts to first save and then open an arbitrarily downloaded file. This can result in an executable file running with local user privileges without explicit user consent. This vulnerability affects Firefox < 58.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.8 HIGH
LOCAL
LOW
NONE
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
mozillaCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 24%
VendorProductVersion
mozillafirefox
𝑥
≤ 57.0.4
canonicalubuntu_linux
14.04
canonicalubuntu_linux
16.04
canonicalubuntu_linux
17.10
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
firefox
sid
132.0.1-1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
firefox
bionic
Fixed 59.0.1+build1-0ubuntu1
released
artful
Fixed 58.0+build6-0ubuntu0.17.10.1
released
xenial
Fixed 58.0+build6-0ubuntu0.16.04.1
released
trusty
Fixed 58.0+build6-0ubuntu0.14.04.1
released
References
http://www.securityfocus.com/bid/102786
http://www.securitytracker.com/id/1040270
https://bugzilla.mozilla.org/show_bug.cgi?id=1390882
https://usn.ubuntu.com/3544-1/
https://www.mozilla.org/security/advisories/mfsa2018-02/
http://www.securityfocus.com/bid/102786
http://www.securitytracker.com/id/1040270
https://bugzilla.mozilla.org/show_bug.cgi?id=1390882
https://usn.ubuntu.com/3544-1/
https://www.mozilla.org/security/advisories/mfsa2018-02/