CVE-2017-7756

🗓️ 11 Jun 2018 21:08:29Reported by [email protected]Type

A use-after-free and use-after-scope vulnerability in Firefox and Thunderbir

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 105
CVE	CVE-2017-7756	11 Jun 201821:29	–	cve
Veracode	Use-After-Free	2 May 201906:12	–	veracode
RedhatCVE	CVE-2017-7756	14 Jun 201704:51	–	redhatcve
Cvelist	CVE-2017-7756	11 Jun 201821:00	–	cvelist
Prion	Design/Logic Flaw	11 Jun 201821:29	–	prion
UbuntuCve	CVE-2017-7756	14 Jun 201700:00	–	ubuntucve
Debian CVE	CVE-2017-7756	11 Jun 201821:29	–	debiancve
Mageia	Updated thunderbird packages fix security vulnerability and bugs	19 Jun 201710:44	–	mageia
Mageia	Updated firefox packages fix security vulnerabilities	19 Jun 201710:44	–	mageia
Mageia	Updated iceape packages fix security vulnerabilities	2 Jan 201814:48	–	mageia

Nvd

Node

mozilla firefoxRange<54.0

mozilla firefox_esrRange<52.2.0

mozilla thunderbirdRange<52.2.0

Node

debian debian_linuxMatch8.0

debian debian_linuxMatch9.0

Source	Link
securityfocus	www.securityfocus.com/bid/99057
access	www.access.redhat.com/errata/RHSA-2017:1440
access	www.access.redhat.com/errata/RHSA-2017:1561
mozilla	www.mozilla.org/security/advisories/mfsa2017-17/
securitytracker	www.securitytracker.com/id/1038689
mozilla	www.mozilla.org/security/advisories/mfsa2017-16/
debian	www.debian.org/security/2017/dsa-3881
debian	www.debian.org/security/2017/dsa-3918
mozilla	www.mozilla.org/security/advisories/mfsa2017-15/
bugzilla	www.bugzilla.mozilla.org/show_bug.cgi

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

11 Jun 2018 21:29Current

9.1High risk

Vulners AI Score9.1

CVSS27.5

CVSS39.8

EPSS0.03688

CWE-416

use-after-free use-after-scope vulnerability firefox thunderbird xhr crash exploitablcve-2017-7756_xml_http_requests