CVE-2017-7755: High severity thunderbird vulnerability
The Firefox installer on Windows can be made to load malicious DLL files stored in the same directory as the installer when it is run. This allows privileged execution if the installer is run with elevated privileges. Note: This attack only affects Windows operating systems. Other operating systems are unaffected.
Affected Software
Event History
Parent advisories
This vulnerability appears in the following advisories.
Peer vulnerabilities
Found alongside the following vulnerabilities.
- CVE-2017-5472
- CVE-2017-7749
- CVE-2017-7750
- CVE-2017-7751
- CVE-2017-7755
- CVE-2017-7752
- CVE-2017-7754
- CVE-2017-7756
- CVE-2017-7757
- CVE-2017-7778
- CVE-2017-7758
- CVE-2017-7763
- CVE-2017-7764
- CVE-2017-7765
- CVE-2017-5470
- CVE-2017-7759
- CVE-2017-7760
- CVE-2017-7761
- CVE-2017-7762
- CVE-2017-7766
- CVE-2017-7767
- CVE-2017-7768
- CVE-2017-7770
- CVE-2017-5471
Frequently Asked Questions
What is the severity of CVE-2017-7755?
CVE-2017-7755 is considered a high severity vulnerability due to its potential for privilege escalation in Windows environments.
How do I fix CVE-2017-7755?
To mitigate CVE-2017-7755, upgrade to Firefox versions above 54, Firefox ESR versions above 52.2, or Thunderbird versions above 52.2.
What platforms are affected by CVE-2017-7755?
CVE-2017-7755 specifically affects the Windows operating system when running vulnerable versions of Mozilla applications.
What applications are impacted by CVE-2017-7755?
CVE-2017-7755 impacts Mozilla Firefox, Firefox ESR, and Thunderbird versions up to specified thresholds.
Can CVE-2017-7755 be exploited by a remote attacker?
CVE-2017-7755 requires local execution of a compromised installer, so it is not a remote attack vector.