CVE-2017-5422
Published: 07 March 2017
If a malicious site uses the "view-source:" protocol in a series within a single hyperlink, it can trigger a non-exploitable browser crash when the hyperlink is selected. This was fixed by no longer making "view-source:" linkable. This vulnerability affects Firefox < 52 and Thunderbird < 52.
Priority
Low
CVSS 3 base score: 7.5
Status
| Package | Release | Status |
|---|---|---|
|
firefox Launchpad, Ubuntu, Debian |
Upstream |
Released
(52.0)
|
| Ubuntu 16.04 LTS (Xenial Xerus) |
Released
(52.0+build2-0ubuntu0.16.04.1)
|
|
| Ubuntu 14.04 ESM (Trusty Tahr) |
Does not exist
(trusty was released [52.0+build2-0ubuntu0.14.04.1])
|
|
| Ubuntu 12.04 ESM (Precise Pangolin) |
Released
(52.0+build2-0ubuntu0.12.04.1)
|