SecuritySpace - CVE-2017-7815

Vulnerability Search		Search 219043 CVE descriptions and 99761 test descriptions, access 10,000+ cross references.
	Tests CVE All

CVE ID: CVE-2017-7815

Description: On pages containing an iframe, the "data:" protocol can be used to create a modal dialog through Javascript that will have an arbitrary domains as the dialog's location, spoofing of the origin of the modal dialog from the user view. Note: This attack only affects installations with e10 multiprocess turned off. Installations with e10s turned on do not support the modal dialog functionality. This vulnerability affects Firefox < 56.

Test IDs: None available

Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2017-7815
BugTraq ID: 101057
http://www.securityfocus.com/bid/101057
http://www.securitytracker.com/id/1039465

CVE ID:	CVE-2017-7815
Description:	On pages containing an iframe, the "data:" protocol can be used to create a modal dialog through Javascript that will have an arbitrary domains as the dialog's location, spoofing of the origin of the modal dialog from the user view. Note: This attack only affects installations with e10 multiprocess turned off. Installations with e10s turned on do not support the modal dialog functionality. This vulnerability affects Firefox < 56.
Test IDs:	None available
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2017-7815 BugTraq ID: 101057 http://www.securityfocus.com/bid/101057 http://www.securitytracker.com/id/1039465