CVE-2017-16541

NameCVE-2017-16541
DescriptionTor Browser before 7.0.9 on macOS and Linux allows remote attackers to bypass the intended anonymity feature and discover a client IP address via vectors involving a crafted web site that leverages file:// mishandling in Firefox, aka TorMoil. NOTE: Tails is unaffected.
SourceCVE (at NVD; CERT, LWN, oss-sec, fulldisc, bugtraq, EDB, Metasploit, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, Mageia, GitHub code/issues, web search, more)
NVD severitymedium (attack range: remote)

Notes

https://trac.torproject.org/projects/tor/ticket/24052
https://blog.torproject.org/tor-browser-709-released
check, this is possibly just specific to the Tor Browser Bundle assigned

Search for package or bug name: Reporting problems