cbcvebase.
CVE-2018-5173
published 2018-06-11

CVE-2018-5173: The filename appearing in the "Downloads" panel improperly renders some Unicode characters, allowing for the file name to be spoofed. This can be used to…

PriorityP426medium5.3CVSS 3.0
AVNACLPRNUINSUCNILAN
EPSS
1.82%
76.1th percentile
The filename appearing in the "Downloads" panel improperly renders some Unicode characters, allowing for the file name to be spoofed. This can be used to obscure the file extension of potentially executable files from user view in the panel. Note: the dialog to open the file will show the full, correct filename and whether it is executable or not. This vulnerability affects Firefox < 60.

Affected

13 ranges
VendorProductVersion rangeFixed in
canonicalubuntu_linux
canonicalubuntu_linux
canonicalubuntu_linux
canonicalubuntu_linux
debianfirefox< firefox 60.0-1 (sid)firefox 60.0-1 (sid)
mozillafirefox< 60.060.0
mozillafirefox>= 0 < 60.0+build2-0ubuntu0.14.04.160.0+build2-0ubuntu0.14.04.1
mozillafirefox>= 0 < 60.0.1+build2-0ubuntu0.14.04.160.0.1+build2-0ubuntu0.14.04.1
mozillafirefox>= 0 < 60.0+build2-0ubuntu0.16.04.160.0+build2-0ubuntu0.16.04.1
mozillafirefox>= 0 < 60.0.1+build2-0ubuntu0.16.04.160.0.1+build2-0ubuntu0.16.04.1
mozillafirefox>= 0 < 60.0+build2-0ubuntu160.0+build2-0ubuntu1
mozillafirefox>= 0 < 60.0.1+build2-0ubuntu0.18.04.160.0.1+build2-0ubuntu0.18.04.1
mozillafirefox>= unspecified < 6060

CVSS provenance

nvdv3.05.3MEDIUMCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:N/I:P/A:N
osv9.8CRITICAL
vendor_ubuntu9.8CRITICAL
vendor_debian5.3MEDIUM
vendor_redhat5.3MEDIUM
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.