Not rated

CVE-2017-5391 Special "about:" pages used by web content, such as RSS feeds, can load privileged "about:" pages in an iframe

Description

Special "about:" pages used by web content, such as RSS feeds, can load privileged "about:" pages in an iframe. If a content-injection bug were found in one of those pages this could allow for potential privilege escalation. This vulnerability affects Firefox < 51.

Affected products and versions

Product	Affected versions	Fixed in
Firefox 51	earliest → < 51	51

References

bugzilla.mozilla.org bugzilla.mozilla.org
1037693 www.securitytracker.com
www.mozilla.org www.mozilla.org
95763 www.securityfocus.com

Timeline

Published June 11, 2018
Last modified August 5, 2024

The 2221 CVEs of Firefox →

CVE-2026-120572 Incorrect boundary conditions in the Layout: Block and Inline component 8.8 High CVE-2026-118027 Frame poisoning in the Layout component 9.1 Critical CVE-2026-118026 Invalid pointer in the JavaScript: GC component 8.8 High CVE-2026-118025 Other issue in the SVG component 8.8 High

Track this CVE

CVE-2017-5391 Special "about:" pages used by web content, such as RSS feeds, can load privileged "about:" pages in an iframe

Description

Affected products and versions

References

Timeline

Other CVEs of Firefox