Mozilla Firefox CVE-2017-7780 Multiple Memory Corruption Vulnerabilities

Bugtraq ID:	100199
Class:	Unknown
CVE:	CVE-2017-7780
Remote:	Yes
Local:	No
Published:	Aug 08 2017 12:00AM
Updated:	Aug 18 2017 02:11PM
Credit:	Gary Kwong, Christian Holler, André Bargull, Bob Clary, Carsten Book, Emilio Cobos Álvarez, Masayuki Nakano, Sebastian Hengst, Franziskus Kiefer, Tyson Smith, and Ronald Crane.
Vulnerable:	Ubuntu Ubuntu Linux 17.04 Ubuntu Ubuntu Linux 16.04 LTS Ubuntu Ubuntu Linux 14.04 LTS Mozilla Firefox 54
Not Vulnerable:	Mozilla Firefox 55

Mozilla Firefox CVE-2017-7780 Multiple Memory Corruption Vulnerabilities

Mozilla Firefox is prone to multiple memory-corruption vulnerability.

Successful exploits may allow an attacker to execute arbitrary code in the context of the user running the affected application or result in denial-of-service conditions.

This issue is fixed in Firefox 55.

Mozilla Firefox CVE-2017-7780 Multiple Memory Corruption Vulnerabilities

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Mozilla Firefox CVE-2017-7780 Multiple Memory Corruption Vulnerabilities

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Mozilla Firefox CVE-2017-7780 Multiple Memory Corruption Vulnerabilities

References:

• Mozilla Firefox Homepage (Mozilla)
  
• MFSA 2017-18: Security vulnerabilities fixed in Firefox 55 (Mozilla)