SecuritySpace - CVE-2017-7820

Vulnerability Search		Search 219043 CVE descriptions and 99761 test descriptions, access 10,000+ cross references.
	Tests CVE All

CVE ID: CVE-2017-7820

Description: The "instanceof" operator can bypass the Xray wrapper mechanism. When called on web content from the browser itself or an extension the web content can provide its own result for that operator, possibly tricking the browser or extension into mishandling the element. This vulnerability affects Firefox < 56.

Test IDs: None available

Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2017-7820
BugTraq ID: 101057
http://www.securityfocus.com/bid/101057
http://www.securitytracker.com/id/1039465

CVE ID:	CVE-2017-7820
Description:	The "instanceof" operator can bypass the Xray wrapper mechanism. When called on web content from the browser itself or an extension the web content can provide its own result for that operator, possibly tricking the browser or extension into mishandling the element. This vulnerability affects Firefox < 56.
Test IDs:	None available
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2017-7820 BugTraq ID: 101057 http://www.securityfocus.com/bid/101057 http://www.securitytracker.com/id/1039465