# CVE-2017-7812: firefox: If web content on a page is dragged onto portions of the browser UI, such as the tab bar, links can be opened that ot...

CVE-2017-7812 is fixed in 4 products on 1 platform, first by firefox 56.0+build6-0ubuntu1, released October 1, 2017. It is not reported as exploited. Patch Radar priority: Routine.

- Web page: https://patchblox.com/security/cve/CVE-2017-7812
- Priority: Routine
- CVSS: n/a (Medium)
- EPSS: 0.0123
- CISA KEV: not listed
- Exploited (vendor report): no
- Publicly disclosed: no
- Published: Oct 1, 2017

## Description

If web content on a page is dragged onto portions of the browser UI, such as the tab bar, links can be opened that otherwise would not be allowed to open. This can allow malicious web content to open a locally stored file through "file:" URLs. This vulnerability affects Firefox < 56.

## Where it's fixed

| Platform | Product | Fixed in | Fix | Released |
|---|---|---|---|---|
| Linux | firefox Ubuntu 18.04.6 LTS (bionic) | 56.0+build6-0ubuntu1 | [firefox 56.0+build6-0ubuntu1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-firefox-56.0-build6-0ubuntu1.md) | Oct 1, 2017 |
| Linux | firefox-globalmenu Ubuntu 18.04.6 LTS (bionic) | 56.0+build6-0ubuntu1 | [firefox-globalmenu 56.0+build6-0ubuntu1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-firefox-globalmenu-56.0-build6-0ubuntu1.md) | Oct 1, 2017 |
| Linux | firefox-mozsymbols Ubuntu 18.04.6 LTS (bionic) | 56.0+build6-0ubuntu1 | [firefox-mozsymbols 56.0+build6-0ubuntu1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-firefox-mozsymbols-56.0-build6-0ubuntu1.md) | Oct 1, 2017 |
| Linux | firefox-testsuite Ubuntu 18.04.6 LTS (bionic) | 56.0+build6-0ubuntu1 | [firefox-testsuite 56.0+build6-0ubuntu1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-firefox-testsuite-56.0-build6-0ubuntu1.md) | Oct 1, 2017 |

---

Data as of 2026-11-07T12:40:37Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo