CVE-2017-7759

Android intent URLs given to Firefox for Android can be used to navigate from HTTP or HTTPS URLs to local "file:" URLs, allowing for the reading of local data through a violation of same-origin policy. Note: This attack only affects Firefox for Android. Other operating systems are not affected. This vulnerability affects Firefox < 54.

• CWE-200

• http://www.securityfocus.com/bid/99052Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1038689Third Party Advisory, VDB Entry
• https://bugzilla.mozilla.org/show_bug.cgi?id=1356893Exploit, Issue Tracking, Patch
• https://www.mozilla.org/security/advisories/mfsa2017-15/Vendor Advisory
• http://www.securityfocus.com/bid/99052Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1038689Third Party Advisory, VDB Entry
• https://bugzilla.mozilla.org/show_bug.cgi?id=1356893Exploit, Issue Tracking, Patch
• https://www.mozilla.org/security/advisories/mfsa2017-15/Vendor Advisory

Published

Jun 11, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-7753An out-of-bounds read occurs when applying style rules to ps…
• CVE-2017-7754An out-of-bounds read in WebGL with a maliciously crafted "I…
• CVE-2017-7755The Firefox installer on Windows can be made to load malicio…
• CVE-2017-7756A use-after-free and use-after-scope vulnerability when logg…
• CVE-2017-7757A use-after-free vulnerability in IndexedDB when one of its …
• CVE-2017-7758An out-of-bounds read vulnerability with the Opus encoder wh…
• CVE-2017-7760The Mozilla Windows updater modifies some files to be update…
• CVE-2017-7761The Mozilla Maintenance Service "helper.exe" application cre…
• CVE-2017-7762When entered directly, Reader Mode did not strip the usernam…
• CVE-2017-7763Default fonts on OS X display some Tibetan characters as whi…
• CVE-2017-7764Characters from the "Canadian Syllabics" unicode block can b…
• CVE-2017-7765The "Mark of the Web" was not correctly saved on Windows whe…