CVE-2017-5397: The cache directory on the local file system is set to be world writable.

Security readout for executives and security teams

Older Firefox versions used a locally writable cache location for libraries. A malicious application already present on the same system could replace Firefox-used files with attacker-controlled versions. This is primarily an endpoint risk for systems still running Firefox before 51.0.3. Exposure is most likely on legacy endpoints or images running Firefox below 51.0.3. The source bundle does not identify affected operating systems, enterprise distributions, or downstream packaged variants. Treat this as a legacy hygiene issue unless vulnerable Firefox versions remain in production. It matters most where old browser installations coexist with weak endpoint application control. Mitigation focus: Upgrade Firefox to 51.0.3 or later, following Mozilla advisory guidance.; Remove or isolate legacy Firefox installations from managed endpoints.; Restrict untrusted local applications through endpoint controls and software allowlisting..

Prepared

Jun 7, 2026, 06:44 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.