CVE-2017-7826

2018-06-1121:00:00

mozilla

www.cve.org

AI Score

9.1

Confidence

High

EPSS

0.01

Percentile

83.4%

JSON

Memory safety bugs were reported in Firefox 56 and Firefox ESR 52.4. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox < 57, Firefox ESR < 52.5, and Thunderbird < 52.5.

CNA Affected

[
  {
    "product": "Firefox",
    "vendor": "Mozilla",
    "versions": [
      {
        "lessThan": "57",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "Firefox ESR",
    "vendor": "Mozilla",
    "versions": [
      {
        "lessThan": "52.5",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "Thunderbird",
    "vendor": "Mozilla",
    "versions": [
      {
        "lessThan": "52.5",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

References

www.securityfocus.com/bid/101832

www.securitytracker.com/id/1039803

access.redhat.com/errata/RHSA-2017:3247

access.redhat.com/errata/RHSA-2017:3372

bugzilla.mozilla.org/buglist.cgi?bug_id=1394530%2C1369561%2C1411458%2C1400003%2C1395138%2C1408412%2C1393840%2C1400763%2C1339259%2C1394265%2C1407740%2C1407751%2C1408005%2C1406398%2C1387799%2C1261175%2C1400554%2C1375146%2C1397811%2C1404636%2C1401804

lists.debian.org/debian-lts-announce/2017/11/msg00018.html

lists.debian.org/debian-lts-announce/2017/12/msg00001.html

usn.ubuntu.com/3688-1/

www.debian.org/security/2017/dsa-4035

www.debian.org/security/2017/dsa-4061

www.debian.org/security/2017/dsa-4075

www.mozilla.org/security/advisories/mfsa2017-24/

www.mozilla.org/security/advisories/mfsa2017-25/

www.mozilla.org/security/advisories/mfsa2017-26/