Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
VOLERION
Volerion Security Research

NOT DEFERRED DATABASE

VULNERABILITIES

CVE-2018-5165 Details

Description

In 32-bit versions of Firefox, the Adobe Flash plugin setting for "Enable Adobe Flash protected mode" is unchecked by default even though the Adobe Flash sandbox is actually enabled. The displayed state is the reverse of the true setting, resulting in user confusion. This could cause users to select this setting intending to activate it and inadvertently turn protections off. This vulnerability affects Firefox < 60.

Metrics

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:5.3 MEDIUMVector:CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URLSource(s)Tag(s)
https://bugzilla.mozilla.org/show_bug.cgi?id=1451452 CVEExploitIssue TrackingPatchVendor Advisory
https://www.mozilla.org/security/advisories/mfsa2018-11/ CVEVendor Advisory
http://www.securityfocus.com/bid/104139 CVEThird Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1040896 CVEThird Party AdvisoryVDB Entry
https://bugzilla.mozilla.org/show_bug.cgi?id=1451452 [email protected]ExploitIssue TrackingPatchVendor Advisory

see all 8 references

Weakness Enumeration

CWE-IDCWE NameSource
NVD-CWE-noinfoInsufficient Information to Classify Weakness[email protected]

Affected Products

ProductVersions
mozilla firefox
< 60.0

CPE

  • cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:x86:*

Remediation

  • No remediation found in references.

Change History

7 change records found show changes

QUICK INFO

CVE Dictionary Entry:
CVE-2018-5165
NVD Published Date:
Jun 11, 2018
NVD Last Modified:
Jun 17, 2026
Source:
[email protected]
CVE-2018-5165 Details - Not Deferred