CVE-2017-7810
firefox: Memory safety bugs were reported in Firefox 55 and Firefox ESR 52.3
CVE-2017-7810 is fixed in 13 products on 1 platform, first by firefox 56.0+build6-0ubuntu1, released October 1, 2017. It is not reported as exploited. Patch Radar priority: Routine.
Routine
CVSS
n/a
Medium
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0280
86th percentile
Memory safety bugs were reported in Firefox 55 and Firefox ESR 52.3. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox < 56, Firefox ESR < 52.4, and Thunderbird < 52.4.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| firefox · Ubuntu 18.04.6 LTS (bionic) | 56.0+build6-0ubuntu1 | firefox 56.0+build6-0ubuntu1 | Oct 1, 2017 |
| firefox-globalmenu · Ubuntu 18.04.6 LTS (bionic) | 56.0+build6-0ubuntu1 | firefox-globalmenu 56.0+build6-0ubuntu1 | Oct 1, 2017 |
| firefox-mozsymbols · Ubuntu 18.04.6 LTS (bionic) | 56.0+build6-0ubuntu1 | firefox-mozsymbols 56.0+build6-0ubuntu1 | Oct 1, 2017 |
| firefox-testsuite · Ubuntu 18.04.6 LTS (bionic) | 56.0+build6-0ubuntu1 | firefox-testsuite 56.0+build6-0ubuntu1 | Oct 1, 2017 |
| libmozjs-52-0 · Ubuntu 18.04.6 LTS (bionic) | 52.8.1-0ubuntu0.18.04.1 | libmozjs-52-0 52.8.1-0ubuntu0.18.04.1 | May 9, 2018 |
| thunderbird · Ubuntu 18.04.6 LTS (bionic) | 1:52.4.0+build1-0ubuntu2 | thunderbird 1:52.4.0+build1-0ubuntu2 | Oct 1, 2017 |
| thunderbird-globalmenu · Ubuntu 18.04.6 LTS (bionic) | 1:52.4.0+build1-0ubuntu2 | thunderbird-globalmenu 1:52.4.0+build1-0ubuntu2 | Oct 1, 2017 |
| thunderbird-gnome-support · Ubuntu 18.04.6 LTS (bionic) | 1:52.4.0+build1-0ubuntu2 | thunderbird-gnome-support 1:52.4.0+build1-0ubuntu2 | Oct 1, 2017 |
| thunderbird-mozsymbols · Ubuntu 18.04.6 LTS (bionic) | 1:52.4.0+build1-0ubuntu2 | thunderbird-mozsymbols 1:52.4.0+build1-0ubuntu2 | Oct 1, 2017 |
| thunderbird-testsuite · Ubuntu 18.04.6 LTS (bionic) | 1:52.4.0+build1-0ubuntu2 | thunderbird-testsuite 1:52.4.0+build1-0ubuntu2 | Oct 1, 2017 |
| xul-ext-calendar-timezones · Ubuntu 18.04.6 LTS (bionic) | 1:52.4.0+build1-0ubuntu2 | xul-ext-calendar-timezones 1:52.4.0+build1-0ubuntu2 | Oct 1, 2017 |
| xul-ext-gdata-provider · Ubuntu 18.04.6 LTS (bionic) | 1:52.4.0+build1-0ubuntu2 | xul-ext-gdata-provider 1:52.4.0+build1-0ubuntu2 | Oct 1, 2017 |
| xul-ext-lightning · Ubuntu 18.04.6 LTS (bionic) | 1:52.4.0+build1-0ubuntu2 | xul-ext-lightning 1:52.4.0+build1-0ubuntu2 | Oct 1, 2017 |