Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-kntc-sjp9-2yfj
SummaryThe cache directory on the local file system is set to be world writable. Firefox defaults to extracting libraries from this cache. This allows for the possibility of an installed malicious application or tools with write access to the file system to replace files used by Firefox with their own versions.
Aliases
0
alias CVE-2017-5397
Fixed_packages
0
url pkg:mozilla/Firefox@51.0.3
purl pkg:mozilla/Firefox@51.0.3
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:mozilla/Firefox@51.0.3
Affected_packages
References
0
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2017-04
reference_id mfsa2017-04
reference_type
scores
0
value critical
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2017-04
Weaknesses
Exploits
Severity_range_score9.0 - 10.0
Exploitabilitynull
Weighted_severitynull
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-kntc-sjp9-2yfj