Ubuntu.comUB:CVE-2017-7796CVE-2017-7796
3.3 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:M/Au:N/C:N/I:P/A:P
4.7 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N
0.001 Low
EPSS
Percentile
20.0%
On Windows systems, the logger run by the Windows updater deletes the file
“update.log” before it runs in order to write a new log of that name. The
path to this file is supplied at the command line to the updater and could
be used in concert with another local exploit to delete a different file
named “update.log” instead of the one intended. Note: This attack only
affects Windows operating systems. Other operating systems are not
affected. This vulnerability affects Firefox < 55.
Notes
| Author | Note |
|---|---|
| chrisccoulson | Windows only |
Related
3.3 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:M/Au:N/C:N/I:P/A:P
4.7 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N
0.001 Low
EPSS
Percentile
20.0%