ByteOS Network

CVE Vulnerability Details :

CVE-2017-16541

PUBLISHED

More Info Official Page

Assigner-mitre

Assigner Org ID-8254265b-2729-46b6-b9e3-3dfca2d5bfca

Published At-04 Nov, 2017 | 18:00

Updated At-05 Aug, 2024 | 20:27

▼CVE Numbering Authority (CNA)

Tor Browser before 7.0.9 on macOS and Linux allows remote attackers to bypass the intended anonymity feature and discover a client IP address via vectors involving a crafted web site that leverages file:// mishandling in Firefox, aka TorMoil. NOTE: Tails is unaffected.

Affected Products

Vendor

n/a

Product

n/a

Versions

Affected

Problem Types

Type	CWE ID	Description
text	N/A	n/a

Type: text

CWE ID: N/A

Description: n/a

References

Hyperlink	Resource
https://trac.torproject.org/projects/tor/ticket/24052	x_refsource_MISC
https://security.gentoo.org/glsa/201810-01	vendor-advisory x_refsource_GENTOO
https://access.redhat.com/errata/RHSA-2018:2693	vendor-advisory x_refsource_REDHAT
https://lists.debian.org/debian-lts-announce/2018/11/msg00011.html	mailing-list x_refsource_MLIST
https://www.wearesegment.com/research/tormoil-torbrowser-unspecified-critical-security-vulnerability/	x_refsource_MISC
https://security.gentoo.org/glsa/201811-13	vendor-advisory x_refsource_GENTOO
https://www.bleepingcomputer.com/news/security/tormoil-vulnerability-leaks-real-ip-address-from-tor-browser-users/	x_refsource_MISC
https://www.debian.org/security/2018/dsa-4327	vendor-advisory x_refsource_DEBIAN
https://access.redhat.com/errata/RHSA-2018:3403	vendor-advisory x_refsource_REDHAT
https://blog.torproject.org/tor-browser-709-released	x_refsource_MISC
http://www.securitytracker.com/id/1041610	vdb-entry x_refsource_SECTRACK
http://www.securityfocus.com/bid/101665	vdb-entry x_refsource_BID
https://access.redhat.com/errata/RHSA-2018:2692	vendor-advisory x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2018:3458	vendor-advisory x_refsource_REDHAT
https://bugzilla.mozilla.org/show_bug.cgi?id=1412081	x_refsource_MISC

Hyperlink: https://trac.torproject.org/projects/tor/ticket/24052

Resource:

x_refsource_MISC

Hyperlink: https://security.gentoo.org/glsa/201810-01

Resource:

vendor-advisory

x_refsource_GENTOO

Hyperlink: https://access.redhat.com/errata/RHSA-2018:2693

Resource:

vendor-advisory

x_refsource_REDHAT

Hyperlink: https://lists.debian.org/debian-lts-announce/2018/11/msg00011.html

Resource:

mailing-list

x_refsource_MLIST

Hyperlink: https://www.wearesegment.com/research/tormoil-torbrowser-unspecified-critical-security-vulnerability/

Resource:

x_refsource_MISC

Hyperlink: https://security.gentoo.org/glsa/201811-13

Resource:

vendor-advisory

x_refsource_GENTOO

Hyperlink: https://www.bleepingcomputer.com/news/security/tormoil-vulnerability-leaks-real-ip-address-from-tor-browser-users/

Resource:

x_refsource_MISC

Hyperlink: https://www.debian.org/security/2018/dsa-4327

Resource:

vendor-advisory

x_refsource_DEBIAN

Hyperlink: https://access.redhat.com/errata/RHSA-2018:3403

Resource:

vendor-advisory

x_refsource_REDHAT

Hyperlink: https://blog.torproject.org/tor-browser-709-released

Resource:

x_refsource_MISC

Hyperlink: http://www.securitytracker.com/id/1041610

Resource:

vdb-entry

x_refsource_SECTRACK

Hyperlink: http://www.securityfocus.com/bid/101665

Resource:

vdb-entry

x_refsource_BID

Hyperlink: https://access.redhat.com/errata/RHSA-2018:2692

Resource:

vendor-advisory

x_refsource_REDHAT

Hyperlink: https://access.redhat.com/errata/RHSA-2018:3458

Resource:

vendor-advisory

x_refsource_REDHAT

Hyperlink: https://bugzilla.mozilla.org/show_bug.cgi?id=1412081

Resource:

x_refsource_MISC

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
https://trac.torproject.org/projects/tor/ticket/24052	x_refsource_MISC x_transferred
https://security.gentoo.org/glsa/201810-01	vendor-advisory x_refsource_GENTOO x_transferred
https://access.redhat.com/errata/RHSA-2018:2693	vendor-advisory x_refsource_REDHAT x_transferred
https://lists.debian.org/debian-lts-announce/2018/11/msg00011.html	mailing-list x_refsource_MLIST x_transferred
https://www.wearesegment.com/research/tormoil-torbrowser-unspecified-critical-security-vulnerability/	x_refsource_MISC x_transferred
https://security.gentoo.org/glsa/201811-13	vendor-advisory x_refsource_GENTOO x_transferred
https://www.bleepingcomputer.com/news/security/tormoil-vulnerability-leaks-real-ip-address-from-tor-browser-users/	x_refsource_MISC x_transferred
https://www.debian.org/security/2018/dsa-4327	vendor-advisory x_refsource_DEBIAN x_transferred
https://access.redhat.com/errata/RHSA-2018:3403	vendor-advisory x_refsource_REDHAT x_transferred
https://blog.torproject.org/tor-browser-709-released	x_refsource_MISC x_transferred
http://www.securitytracker.com/id/1041610	vdb-entry x_refsource_SECTRACK x_transferred
http://www.securityfocus.com/bid/101665	vdb-entry x_refsource_BID x_transferred
https://access.redhat.com/errata/RHSA-2018:2692	vendor-advisory x_refsource_REDHAT x_transferred
https://access.redhat.com/errata/RHSA-2018:3458	vendor-advisory x_refsource_REDHAT x_transferred
https://bugzilla.mozilla.org/show_bug.cgi?id=1412081	x_refsource_MISC x_transferred