Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2017-5421: Firefox and Thunderbird can display fake print preview

CVE-2017-5421 · published 8 years ago

Summary

If pop‑up windows are allowed, a malicious website can make the print preview window look like a different site, confusing users about which page they are viewing. This affects older versions of Firefox and Thunderbird. Update to the latest version or disable pop‑up windows to prevent the trick.

What to do

Update mozilla firefox to version 52.0. or later.
Update mozilla thunderbird to version 52.0. or later.

Affected software

Vendor	Product	Affected versions
mozilla	firefox	< 52.0. `cpe:2.3:a:mozilla:firefox::::::::`
mozilla	thunderbird	< 52.0. `cpe:2.3:a:mozilla:thunderbird::::::::`

Original advisory text

A malicious site could spoof the contents of the print preview window if popup windows are enabled, resulting in user confusion of what site is currently loaded. This vulnerability affects Firefox ...

References

http://www.securityfocus.com/bid/96692 Third Party Advisory VDB Entry
http://www.securitytracker.com/id/1037966 Third Party Advisory VDB Entry
https://bugzilla.mozilla.org/show_bug.cgi?id=1301876 Exploit Issue Tracking Patch Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2017-05/ Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2017-09/ Vendor Advisory

Fix within

Internet-facing 14 days

Internal 60 days

Not known to be exploited
Can be exploited automatically (estimated)
Gives an attacker partial control (estimated)

Severity

7.5 High

Exploitation

2% chance of attack within 30 days

Type

CWE-20Improper Input Validation

Timeline

Published11 Jun 2018

Updated3 Nov 2026

First seen29 Sep 2026

Sources

CVE-2017-5421 · NVD

Track software like this

Free during beta