CVE-2018-5118

MEDIUM

Firefox < 58 - Sensitive Local File Exposure via Activity Stream Screenshot Feature

Title source: llm

Description

The screenshot images displayed in the Activity Stream page displayed when a new tab is opened is created from the meta tags of websites. An issue was discovered where the page could attempt to create these images through "file:" URLs from the local file system. This loading is blocked by the sandbox but could expose local data if combined with another attack that escapes sandbox protections. This vulnerability affects Firefox < 58.

References (5)

Core 5

Core References

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://www.securitytracker.com/id/1040270

Third Party Advisory vendor-advisory x_refsource_ubuntu

https://usn.ubuntu.com/3544-1/

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/102786

Issue Tracking x_refsource_confirm

https://bugzilla.mozilla.org/show_bug.cgi?id=1420049

Vendor Advisory x_refsource_confirm

https://www.mozilla.org/security/advisories/mfsa2018-02/

Scores

CVSS v3 5.3

EPSS 0.0051

EPSS Percentile 66.4%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Details

CWE

CWE-200

Status published

Products (4)

canonical/ubuntu_linux 14.04

canonical/ubuntu_linux 16.04

canonical/ubuntu_linux 17.10

mozilla/firefox < 57.0.4

Published Jun 11, 2018

Tracked Since Feb 18, 2026