CVE-2017-7794

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

On Linux systems, if the content process is compromised, the sandbox broker will allow files to be truncated even though the sandbox explicitly only has read access to the local file system and no write permissions. Note: This attack only affects the Linux operating system. Other operating systems are not affected. This vulnerability affects Firefox < 55.

Metrics

CVSS 3.0 7.8/10CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-276

Affected software

No affected versions have been published.

Timeline

Published
Jun 11, 2018
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2017

CVE-2017-77964.7On Windows systems, the logger run by the Windows updater deletes the file "update.log" before it runs in order to write a new log of that nCVE-2017-77977.5Response header name interning does not have same-origin protections and these headers are stored in a global registry. This allows stored hCVE-2017-77988.8The Developer Tools feature suffers from a XUL injection vulnerability due to improper sanitization of the web page source code. In the worsCVE-2017-77996.1JavaScript in the "about:webrtc" page is not sanitized properly being assigned to "innerHTML". Data on this page is supplied by WebRTC usageCVE-2017-78009.8A use-after-free vulnerability can occur in WebSockets when the object holding the connection is freed before the disconnection operation isCVE-2017-78019.8A use-after-free vulnerability can occur while re-computing layout for a "marquee" element during window resizing where the updated style obCVE-2017-78029.8A use-after-free vulnerability can occur when manipulating the DOM during the resize event of an image element. If these elements have been CVE-2017-78037.5When a page's content security policy (CSP) header contains a "sandbox" directive, other directives are ignored. This results in the incorreCVE-2017-78047.5The destructor function for the "WindowsDllDetourPatcher" class can be re-purposed by malicious code in concert with another vulnerability tCVE-2017-78057.5During TLS 1.2 exchanges, handshake hashes are generated which point to a message buffer. This saved data is used for later messages but in CVE-2017-78067.5A use-after-free vulnerability can occur when the layer manager is freed too early when rendering specific SVG content, resulting in a potenCVE-2017-78078.1A mechanism that uses AppCache to hijack a URL in a domain using fallback by serving the files from a sub-path on the domain. This has been