CVE-2017-16541
firefox: Tor Browser before 7.0.9 on macOS and Linux allows remote attackers to bypass the intended anonymity feature and disc...
CVE-2017-16541 is fixed in 12 products on 1 platform, first by firefox 62.0+build2-0ubuntu0.18.04.3, released September 5, 2018. It is not reported as exploited. Patch Radar priority: Routine.
Routine
CVSS
n/a
Medium
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0366
89th percentile
Tor Browser before 7.0.9 on macOS and Linux allows remote attackers to bypass the intended anonymity feature and discover a client IP address via vectors involving a crafted web site that leverages file:// mishandling in Firefox, aka TorMoil. NOTE: Tails is unaffected.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| firefox · Ubuntu 18.04.6 LTS (bionic) | 62.0+build2-0ubuntu0.18.04.3 | firefox 62.0+build2-0ubuntu0.18.04.3 | Sep 5, 2018 |
| firefox-globalmenu · Ubuntu 18.04.6 LTS (bionic) | 62.0+build2-0ubuntu0.18.04.3 | firefox-globalmenu 62.0+build2-0ubuntu0.18.04.3 | Sep 5, 2018 |
| firefox-mozsymbols · Ubuntu 18.04.6 LTS (bionic) | 62.0+build2-0ubuntu0.18.04.3 | firefox-mozsymbols 62.0+build2-0ubuntu0.18.04.3 | Sep 5, 2018 |
| firefox-testsuite · Ubuntu 18.04.6 LTS (bionic) | 62.0+build2-0ubuntu0.18.04.3 | firefox-testsuite 62.0+build2-0ubuntu0.18.04.3 | Sep 5, 2018 |
| thunderbird · Ubuntu 18.04.6 LTS (bionic) | 1:60.2.1+build1-0ubuntu0.18.04.2 | thunderbird 1:60.2.1+build1-0ubuntu0.18.04.2 | Feb 28, 2019 |
| thunderbird-globalmenu · Ubuntu 18.04.6 LTS (bionic) | 1:60.2.1+build1-0ubuntu0.18.04.2 | thunderbird-globalmenu 1:60.2.1+build1-0ubuntu0.18.04.2 | Feb 28, 2019 |
| thunderbird-gnome-support · Ubuntu 18.04.6 LTS (bionic) | 1:60.2.1+build1-0ubuntu0.18.04.2 | thunderbird-gnome-support 1:60.2.1+build1-0ubuntu0.18.04.2 | Feb 28, 2019 |
| thunderbird-mozsymbols · Ubuntu 18.04.6 LTS (bionic) | 1:60.2.1+build1-0ubuntu0.18.04.2 | thunderbird-mozsymbols 1:60.2.1+build1-0ubuntu0.18.04.2 | Feb 28, 2019 |
| thunderbird-testsuite · Ubuntu 18.04.6 LTS (bionic) | 1:60.2.1+build1-0ubuntu0.18.04.2 | thunderbird-testsuite 1:60.2.1+build1-0ubuntu0.18.04.2 | Feb 28, 2019 |
| xul-ext-calendar-timezones · Ubuntu 18.04.6 LTS (bionic) | 1:60.2.1+build1-0ubuntu0.18.04.2 | xul-ext-calendar-timezones 1:60.2.1+build1-0ubuntu0.18.04.2 | Feb 28, 2019 |
| xul-ext-gdata-provider · Ubuntu 18.04.6 LTS (bionic) | 1:60.2.1+build1-0ubuntu0.18.04.2 | xul-ext-gdata-provider 1:60.2.1+build1-0ubuntu0.18.04.2 | Feb 28, 2019 |
| xul-ext-lightning · Ubuntu 18.04.6 LTS (bionic) | 1:60.2.1+build1-0ubuntu0.18.04.2 | xul-ext-lightning 1:60.2.1+build1-0ubuntu0.18.04.2 | Feb 28, 2019 |