{
  "cveId": "CVE-2017-7814",
  "url": "https://patchblox.com/security/cve/CVE-2017-7814",
  "summary": "CVE-2017-7814 is fixed in 12 products on 1 platform, first by firefox 56.0\u002Bbuild6-0ubuntu1, released October 1, 2017. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "firefox: File downloads encoded with \u0022blob:\u0022 and \u0022data:\u0022 URL elements bypassed normal file download checks though the Phishing...",
  "description": "File downloads encoded with \u0022blob:\u0022 and \u0022data:\u0022 URL elements bypassed normal file download checks though the Phishing and Malware Protection feature and its block lists of suspicious sites and files. This would allow malicious sites to lure users into downloading executables that would otherwise be detected as suspicious. This vulnerability affects Firefox \u0026lt; 56, Firefox ESR \u0026lt; 52.4, and Thunderbird \u0026lt; 52.4.",
  "published": "2017-10-01T17:00:00Z",
  "severity": "Medium",
  "epss": 0.01191,
  "epssPercentile": 0.68118,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "firefox",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "56.0\u002Bbuild6-0ubuntu1",
      "fix": "firefox 56.0\u002Bbuild6-0ubuntu1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-firefox-56.0-build6-0ubuntu1",
      "released": "2017-10-01T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "firefox-globalmenu",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "56.0\u002Bbuild6-0ubuntu1",
      "fix": "firefox-globalmenu 56.0\u002Bbuild6-0ubuntu1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-firefox-globalmenu-56.0-build6-0ubuntu1",
      "released": "2017-10-01T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "firefox-mozsymbols",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "56.0\u002Bbuild6-0ubuntu1",
      "fix": "firefox-mozsymbols 56.0\u002Bbuild6-0ubuntu1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-firefox-mozsymbols-56.0-build6-0ubuntu1",
      "released": "2017-10-01T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "firefox-testsuite",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "56.0\u002Bbuild6-0ubuntu1",
      "fix": "firefox-testsuite 56.0\u002Bbuild6-0ubuntu1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-firefox-testsuite-56.0-build6-0ubuntu1",
      "released": "2017-10-01T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "thunderbird",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "1:52.4.0\u002Bbuild1-0ubuntu2",
      "fix": "thunderbird 1:52.4.0\u002Bbuild1-0ubuntu2",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-thunderbird-1-52.4.0-build1-0ubuntu2",
      "released": "2017-10-01T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "thunderbird-globalmenu",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "1:52.4.0\u002Bbuild1-0ubuntu2",
      "fix": "thunderbird-globalmenu 1:52.4.0\u002Bbuild1-0ubuntu2",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-thunderbird-globalmenu-1-52.4.0-build1-0ubuntu2",
      "released": "2017-10-01T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "thunderbird-gnome-support",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "1:52.4.0\u002Bbuild1-0ubuntu2",
      "fix": "thunderbird-gnome-support 1:52.4.0\u002Bbuild1-0ubuntu2",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-thunderbird-gnome-support-1-52.4.0-build1-0ubuntu2",
      "released": "2017-10-01T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "thunderbird-mozsymbols",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "1:52.4.0\u002Bbuild1-0ubuntu2",
      "fix": "thunderbird-mozsymbols 1:52.4.0\u002Bbuild1-0ubuntu2",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-thunderbird-mozsymbols-1-52.4.0-build1-0ubuntu2",
      "released": "2017-10-01T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "thunderbird-testsuite",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "1:52.4.0\u002Bbuild1-0ubuntu2",
      "fix": "thunderbird-testsuite 1:52.4.0\u002Bbuild1-0ubuntu2",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-thunderbird-testsuite-1-52.4.0-build1-0ubuntu2",
      "released": "2017-10-01T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "xul-ext-calendar-timezones",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "1:52.4.0\u002Bbuild1-0ubuntu2",
      "fix": "xul-ext-calendar-timezones 1:52.4.0\u002Bbuild1-0ubuntu2",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-xul-ext-calendar-timezones-1-52.4.0-build1-0ubuntu2",
      "released": "2017-10-01T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "xul-ext-gdata-provider",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "1:52.4.0\u002Bbuild1-0ubuntu2",
      "fix": "xul-ext-gdata-provider 1:52.4.0\u002Bbuild1-0ubuntu2",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-xul-ext-gdata-provider-1-52.4.0-build1-0ubuntu2",
      "released": "2017-10-01T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "xul-ext-lightning",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "1:52.4.0\u002Bbuild1-0ubuntu2",
      "fix": "xul-ext-lightning 1:52.4.0\u002Bbuild1-0ubuntu2",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-xul-ext-lightning-1-52.4.0-build1-0ubuntu2",
      "released": "2017-10-01T17:00:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-07T12:40:37Z"
}