CVE-2017-5454

A mechanism to bypass file system access protections in the sandbox to use the file picker to access different files than those selected in the file picker through the use of relative paths. This allows for read only access to the local file system. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 52.1, and Firefox < 53.

• CWE-200

• http://www.securityfocus.com/bid/97940Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1038320Third Party Advisory, VDB Entry
• https://access.redhat.com/errata/RHSA-2017:1106Third Party Advisory
• https://access.redhat.com/errata/RHSA-2017:1201Third Party Advisory
• https://bugzilla.mozilla.org/show_bug.cgi?id=1349276Issue Tracking, Patch, Vendor Advisory
• https://www.mozilla.org/security/advisories/mfsa2017-10/Vendor Advisory
• https://www.mozilla.org/security/advisories/mfsa2017-12/Vendor Advisory
• https://www.mozilla.org/security/advisories/mfsa2017-13/Vendor Advisory
• http://www.securityfocus.com/bid/97940Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1038320Third Party Advisory, VDB Entry
• https://access.redhat.com/errata/RHSA-2017:1106Third Party Advisory
• https://access.redhat.com/errata/RHSA-2017:1201Third Party Advisory
• https://bugzilla.mozilla.org/show_bug.cgi?id=1349276Issue Tracking, Patch, Vendor Advisory
• https://www.mozilla.org/security/advisories/mfsa2017-10/Vendor Advisory
• https://www.mozilla.org/security/advisories/mfsa2017-12/Vendor Advisory
• https://www.mozilla.org/security/advisories/mfsa2017-13/Vendor Advisory

Published

Jun 11, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-5448An out-of-bounds write in "ClearKeyDecryptor" while decrypti…
• CVE-2017-5449A possibly exploitable crash triggered during layout and man…
• CVE-2017-5450A mechanism to spoof the Firefox for Android addressbar usin…
• CVE-2017-5451A mechanism to spoof the addressbar through the user interac…
• CVE-2017-5452Malicious sites can display a spoofed addressbar on a page w…
• CVE-2017-5453A mechanism to inject static HTML into the RSS reader previe…
• CVE-2017-5455The internal feed reader APIs that crossed the sandbox barri…
• CVE-2017-5456A mechanism to bypass file system access protections in the …
• CVE-2017-5458When a "javascript:" URL is drag and dropped by a user into …
• CVE-2017-5459A buffer overflow in WebGL triggerable by web content, resul…
• CVE-2017-5460A use-after-free vulnerability in frame selection triggered …
• CVE-2017-5461Mozilla Network Security Services (NSS) before 3.21.4, 3.22.…