Manually dragging and dropping an Outlook email message into the browser will trigger a page navigation when the message's mail columns are…
mozilla·CWE-610·Published 2018-10-18
Manually dragging and dropping an Outlook email message into the browser will trigger a page navigation when the message's mail columns are incorrectly interpreted as a URL. *Note: this issue only affects Windows operating systems with Outlook installed. Other operating systems are not affected.*. This vulnerability affects Firefox ESR < 60.2 and Firefox < 62.
Manually dragging and dropping an Outlook email message into the browser will trigger a page navigation when the message's mail columns are incorrectly interpreted as a URL. *Note: this issue only affects Windows operating systems with Outlook installed. Other operating systems are not affected.*. This vulnerability affects Firefox ESR < 60.2 and Firefox < 62.
Arrastrar y soltar manualmente un mensaje de email de Outlook en el navegador desencadenará una navegación de página cuando las columnas de email del mensaje se interpretan de forma incorrecta como URL. Nota: este problema solo afecta a sistemas operativos Windows con Outlook instalado. Otros sistemas operativos no se han visto afectados *. La vulnerabilidad afecta a Firefox ESR en versiones anteriores a la 60.2 y Firefox en versiones anteriores a la 62.
| Version | Type | Source | Base | Exp | Impact | Vector |
|---|---|---|---|---|---|---|
| 2.0 | Primary | NVD | 5.0 | 10.0 | 2.9 | AV:N/AC:L/Au:N/C:N/I:P/A:N |
| 3.0 | Primary | NVD | 5.3 | 3.9 | 1.4 | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N |