CVE-2017-7779

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

Memory safety bugs were reported in Firefox 54, Firefox ESR 52.2, and Thunderbird 52.2. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55.

Metrics

CVSS 3.0 9.8/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-119

Affected software

No affected versions have been published.

Timeline

Published: Jun 11, 2018
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2017

CVE-2017-77809.8Memory safety bugs were reported in Firefox 54. Some of these bugs showed evidence of memory corruption and we presume that with enough effo CVE-2017-77815.9An error occurs in the elliptic curve point addition algorithm that uses mixed Jacobian-affine coordinates where it can yield a result "POIN CVE-2017-77825.3An error in the "WindowsDllDetourPatcher" where a RWX ("Read/Write/Execute") 4k block is allocated but never protected, violating DEP protec CVE-2017-77837.5If a long user name is used in a username/password combination in a site URL (such as " http://UserName:Password@example.com"), the resultin CVE-2017-77849.8A use-after-free vulnerability can occur when reading an image observer during frame reconstruction after the observer has been freed. This CVE-2017-77859.8A buffer overflow can occur when manipulating Accessible Rich Internet Applications (ARIA) attributes within the DOM. This results in a pote CVE-2017-77869.8A buffer overflow can occur when the image renderer attempts to paint non-displayable SVG elements. This results in a potentially exploitabl CVE-2017-77877.5Same-origin policy protections can be bypassed on pages with embedded iframes during page reloads, allowing the iframes to access content on CVE-2017-77889.8When an "iframe" has a "sandbox" attribute and its content is specified using "srcdoc", that content does not inherit the containing page's CVE-2017-77895.3If a server sends two Strict-Transport-Security (STS) headers for a single connection, they will be rejected as invalid and HTTP Strict Tran CVE-2017-77907.5On Windows systems, if non-null-terminated strings are copied into the crash reporter for some specific registry keys, stack memory data can CVE-2017-77915.3On pages containing an iframe, the "data:" protocol can be used to create a modal alert that will render over arbitrary domains following pa