CVE-2017-7779 Memory safety bugs were reported in Firefox 54, Firefox ESR 52.2, and Thunderbird 52.2. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of thes...
CriticalCVSS 9.8
EPSS 2.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Memory safety bugs were reported in Firefox 54, Firefox ESR 52.2, and Thunderbird 52.2. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/firefox-esr(Debian:12) | < 52.3.0esr-1 | 52.3.0esr-1 |
| debian/firefox-esr(Debian:13) | < 52.3.0esr-1 | 52.3.0esr-1 |
| debian/firefox-esr(Debian:14) | < 52.3.0esr-1 | 52.3.0esr-1 |
| debian linux | = 8.0 | No fix listed |
| debian linux | = 9.0 | No fix listed |
| redhat enterprise linux desktop | = 6.0 | No fix listed |
| redhat enterprise linux desktop | = 7.0 | No fix listed |
| redhat enterprise linux server | = 6.0 | No fix listed |
| redhat enterprise linux server | = 7.0 | No fix listed |
| redhat enterprise linux server aus | = 7.4 | No fix listed |
| redhat enterprise linux server eus | = 7.4 | No fix listed |
| redhat enterprise linux server eus | = 7.5 | No fix listed |
| redhat enterprise linux workstation | = 6.0 | No fix listed |
| redhat enterprise linux workstation | = 7.0 | No fix listed |
| mozilla Firefox | < 55.0 | 55.0 |
| mozilla Firefox | < 52.3.0 | 52.3.0 |
| mozilla Thunderbird | < 52.3.0 | 52.3.0 |
| mozilla Thunderbird | < 52.3 | 52.3 |
| mozilla firefox esr | < 52.3 | 52.3 |
| mozilla Firefox | < 55 | 55 |
References
- Debian Security Tracker CVE-2017-7779 vendor-advisory
- 100201 third-party-advisory vdb-entry
- 1039124 third-party-advisory vdb-entry
- RHSA-2017:2456 third-party-advisory vendor-advisory
- RHSA-2017:2534 third-party-advisory vendor-advisory
- bugzilla.mozilla.org issue-tracking permissions-required third-party-advisory
- GLSA-201803-14 third-party-advisory vendor-advisory
- DSA-3928 third-party-advisory vendor-advisory
- DSA-3968 third-party-advisory vendor-advisory
- www.mozilla.org vendor-advisory
- www.mozilla.org vendor-advisory
- www.mozilla.org vendor-advisory