PT-2017-4004

CVE-2017-7782

·

Published

2017-03-02

·

Updated

2024-12-12

Description by

CVSS 3.1
5.3
Medium
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Name of the Vulnerable Software and Affected Versions Firefox versions prior to 55 Firefox ESR versions prior to 52.3 Thunderbird versions prior to 52.3
Description The issue is related to an error in the "WindowsDllDetourPatcher" where a Read/Write/Execute block is allocated but not protected, violating DEP protections. This affects Windows operating systems. The vulnerability is associated with insecure privilege management in the implementation of the WindowsDllDetourPatcher class in Firefox, Firefox ESR, and Thunderbird browsers, potentially allowing a remote attacker to compromise data integrity.
Recommendations For Firefox versions prior to 55, update to version 55 or later. For Firefox ESR versions prior to 52.3, update to version 52.3 or later. For Thunderbird versions prior to 52.3, update to version 52.3 or later.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Related identifiers
ALT-PU-2017-2019
ALT-PU-2017-2060
MGASA-2018-0018
OPENSUSE-SU-2017_2151-1
OPENSUSE-SU-2017:2209-1
OPENSUSE-SU-2017_2209-1
OPENSUSE-SU-2024:10600-1
OPENSUSE-SU-2024:10601-1
OPENSUSE-SU-2024:14572-1
SUSE-SU-2017:2302-1
SUSE-SU-2017:2589-1
Found an issue in the description? Have something to add? Feel free to write us 👾