CVE-2017-7766

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

An attack using manipulation of "updater.ini" contents, used by the Mozilla Windows Updater, and privilege escalation through the Mozilla Maintenance Service to allow for arbitrary file execution and deletion by the Maintenance Service, which has privileged access. Note: This attack requires local system access and only affects Windows. Other operating systems are not affected. This vulnerability affects Firefox ESR < 52.2 and Firefox < 54.

Metrics

CVSS 3.0 7.8/10CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected software

Vendor	Product	Versions
Mozilla	Firefox ESR	>= unspecified, < 52.2
Mozilla	Firefox	>= unspecified, < 54

References

http://www.securityfocus.com/bid/99057Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1038689Third Party Advisory, VDB Entry
https://bugzilla.mozilla.org/show_bug.cgi?id=1342742Issue Tracking, Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2017-15/Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2017-16/Vendor Advisory
http://www.securityfocus.com/bid/99057Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1038689Third Party Advisory, VDB Entry
https://bugzilla.mozilla.org/show_bug.cgi?id=1342742Issue Tracking, Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2017-15/Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2017-16/Vendor Advisory

Timeline

Published: Jun 11, 2018
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2017

CVE-2017-77675.5The Mozilla Maintenance Service can be invoked by an unprivileged user to overwrite arbitrary files with junk data using the Mozilla Windows CVE-2017-77685.5The Mozilla Maintenance Service can be invoked by an unprivileged user to read 32 bytes of any arbitrary file on the local system by convinc CVE-2017-77705.9A mechanism where when a new tab is loaded through JavaScript events, if fullscreen mode is then entered, the addressbar will not be rendere CVE-2017-77718.1Out-of-bounds read in Graphite2 Library in Firefox before 54 in graphite2::Pass::readPass function.CVE-2017-77728.8Heap-based Buffer Overflow in Graphite2 library in Firefox before 54 in lz4::decompress function.CVE-2017-77738.8Heap-based Buffer Overflow write in Graphite2 library in Firefox before 54 in lz4::decompress src/Decompressor.CVE-2017-77749.1Out-of-bounds read in Graphite2 Library in Firefox before 54 in graphite2::Silf::readGraphite function.CVE-2017-77768.1Heap-based Buffer Overflow read in Graphite2 library in Firefox before 54 in graphite2::Silf::getClassGlyph.CVE-2017-77778.8Use of uninitialized memory in Graphite2 library in Firefox before 54 in graphite2::GlyphCache::Loader::read_glyph function.CVE-2017-77789.8A number of security vulnerabilities in the Graphite 2 library including out-of-bounds reads, buffer overflow reads and writes, and the use CVE-2017-77799.8Memory safety bugs were reported in Firefox 54, Firefox ESR 52.2, and Thunderbird 52.2. Some of these bugs showed evidence of memory corrupt CVE-2017-77809.8Memory safety bugs were reported in Firefox 54. Some of these bugs showed evidence of memory corruption and we presume that with enough effo