ISOMAN

CVE

CVE-2017-7810

Memory safety bugs were reported in Firefox 55 and Firefox ESR 52.3. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox < 56, Firefox ESR < 52.4, and Thunderbird < 52.4.

Severity
CRITICAL
CVSS
9.8
Published
Modified

Linked Releases

DistributionReleaseStatusEvidence
Ubuntu18.04.6 amd64 desktopunknownsource
Ubuntu18.04.6 amd64 live-serverunknownsource

References

  1. http://www.securityfocus.com/bid/101054
  2. http://www.securitytracker.com/id/1039465
  3. https://access.redhat.com/errata/RHSA-2017:2831
  4. https://access.redhat.com/errata/RHSA-2017:2885
  5. https://bugzilla.mozilla.org/buglist.cgi?bug_id=1386787%2C1389974%2C1371657%2C1360334%2C1390550%2C1380824%2C1387918%2C1395598
  6. https://lists.debian.org/debian-lts-announce/2017/11/msg00000.html
  7. https://security.gentoo.org/glsa/201803-14
  8. https://usn.ubuntu.com/3688-1/
  9. https://www.debian.org/security/2017/dsa-3987
  10. https://www.debian.org/security/2017/dsa-4014
  11. https://www.mozilla.org/security/advisories/mfsa2017-21/
  12. https://www.mozilla.org/security/advisories/mfsa2017-22/
  13. https://www.mozilla.org/security/advisories/mfsa2017-23/
  14. http://www.securityfocus.com/bid/101054
  15. http://www.securitytracker.com/id/1039465
  16. https://access.redhat.com/errata/RHSA-2017:2831
  17. https://access.redhat.com/errata/RHSA-2017:2885
  18. https://bugzilla.mozilla.org/buglist.cgi?bug_id=1386787%2C1389974%2C1371657%2C1360334%2C1390550%2C1380824%2C1387918%2C1395598
  19. https://lists.debian.org/debian-lts-announce/2017/11/msg00000.html
  20. https://security.gentoo.org/glsa/201803-14