CVE-2017-7794

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

On Linux systems, if the content process is compromised, the sandbox broker will allow files to be truncated even though the sandbox explicitly only has read access to the local file system and no write permissions. Note: This attack only affects the Linux operating system. Other operating systems are not affected. This vulnerability affects Firefox < 55.

Metrics

CVSS 3.0 7.8/10CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-276

Affected software

Vendor	Product	Versions
Mozilla	Firefox	>= unspecified, < 55

References

http://www.securitytracker.com/id/1039124Third Party Advisory, VDB Entry
https://bugzilla.mozilla.org/show_bug.cgi?id=1374281Exploit, Issue Tracking, Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2017-18/Vendor Advisory
http://www.securitytracker.com/id/1039124Third Party Advisory, VDB Entry
https://bugzilla.mozilla.org/show_bug.cgi?id=1374281Exploit, Issue Tracking, Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2017-18/Vendor Advisory

Timeline

Published: Jun 11, 2018
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2017

CVE-2017-77964.7On Windows systems, the logger run by the Windows updater deletes the file "update.log" before it runs in order to write a new log of that n CVE-2017-77977.5Response header name interning does not have same-origin protections and these headers are stored in a global registry. This allows stored h CVE-2017-77988.8The Developer Tools feature suffers from a XUL injection vulnerability due to improper sanitization of the web page source code. In the wors CVE-2017-77996.1JavaScript in the "about:webrtc" page is not sanitized properly being assigned to "innerHTML". Data on this page is supplied by WebRTC usage CVE-2017-78009.8A use-after-free vulnerability can occur in WebSockets when the object holding the connection is freed before the disconnection operation is CVE-2017-78019.8A use-after-free vulnerability can occur while re-computing layout for a "marquee" element during window resizing where the updated style ob CVE-2017-78029.8A use-after-free vulnerability can occur when manipulating the DOM during the resize event of an image element. If these elements have been CVE-2017-78037.5When a page's content security policy (CSP) header contains a "sandbox" directive, other directives are ignored. This results in the incorre CVE-2017-78047.5The destructor function for the "WindowsDllDetourPatcher" class can be re-purposed by malicious code in concert with another vulnerability t CVE-2017-78057.5During TLS 1.2 exchanges, handshake hashes are generated which point to a message buffer. This saved data is used for later messages but in CVE-2017-78067.5A use-after-free vulnerability can occur when the layer manager is freed too early when rendering specific SVG content, resulting in a poten CVE-2017-78078.1A mechanism that uses AppCache to hijack a URL in a domain using fallback by serving the files from a sub-path on the domain. This has been