CVE-2017-7811

firefox: Memory safety bugs were reported in Firefox 55

CVE-2017-7811 is fixed in 4 products on 1 platform, first by firefox 56.0+build6-0ubuntu1, released October 1, 2017. It is not reported as exploited. Patch Radar priority: Routine.

Routine
CVSS
n/a
Medium
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0227
83rd percentile

Memory safety bugs were reported in Firefox 55. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox < 56.

Where it's fixed

ProductFixed inFixReleased
Linux
firefox · Ubuntu 18.04.6 LTS (bionic) 56.0+build6-0ubuntu1 firefox 56.0+build6-0ubuntu1 Oct 1, 2017
firefox-globalmenu · Ubuntu 18.04.6 LTS (bionic) 56.0+build6-0ubuntu1 firefox-globalmenu 56.0+build6-0ubuntu1 Oct 1, 2017
firefox-mozsymbols · Ubuntu 18.04.6 LTS (bionic) 56.0+build6-0ubuntu1 firefox-mozsymbols 56.0+build6-0ubuntu1 Oct 1, 2017
firefox-testsuite · Ubuntu 18.04.6 LTS (bionic) 56.0+build6-0ubuntu1 firefox-testsuite 56.0+build6-0ubuntu1 Oct 1, 2017