CVE-2017-7804

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

The destructor function for the "WindowsDllDetourPatcher" class can be re-purposed by malicious code in concert with another vulnerability to write arbitrary data to an attacker controlled location in memory. This can be used to bypass existing memory protections in this situation. Note: This attack only affects Windows operating systems. Other operating systems are not affected. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55.

Metrics

CVSS 3.0 7.5/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Weakness enumeration

CWE-20

Affected software

No affected versions have been published.

Timeline

Published: Jun 11, 2018
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2017

CVE-2017-78057.5During TLS 1.2 exchanges, handshake hashes are generated which point to a message buffer. This saved data is used for later messages but in CVE-2017-78067.5A use-after-free vulnerability can occur when the layer manager is freed too early when rendering specific SVG content, resulting in a poten CVE-2017-78078.1A mechanism that uses AppCache to hijack a URL in a domain using fallback by serving the files from a sub-path on the domain. This has been CVE-2017-78085.3A content security policy (CSP) "frame-ancestors" directive containing origins with paths allows for comparisons against those paths instead CVE-2017-78099.8A use-after-free vulnerability can occur when an editor DOM node is deleted prematurely during tree traversal while still bound to the docum CVE-2017-78109.8Memory safety bugs were reported in Firefox 55 and Firefox ESR 52.3. Some of these bugs showed evidence of memory corruption and we presume CVE-2017-78119.8Memory safety bugs were reported in Firefox 55. Some of these bugs showed evidence of memory corruption and we presume that with enough effo CVE-2017-78125.3If web content on a page is dragged onto portions of the browser UI, such as the tab bar, links can be opened that otherwise would not be al CVE-2017-78138.2Inside the JavaScript parser, a cast of an integer to a narrower type can result in data read from outside the buffer being parsed. This usu CVE-2017-78147.8File downloads encoded with "blob:" and "data:" URL elements bypassed normal file download checks though the Phishing and Malware Protection CVE-2017-78155.3On pages containing an iframe, the "data:" protocol can be used to create a modal dialog through Javascript that will have an arbitrary doma CVE-2017-78165.3WebExtensions could use popups and panels in the extension UI to load an "about:" privileged URL, violating security checks that disallow th