CVE-2017-7755
First published: Tue Jun 13 2017(Updated: )
The Firefox installer on Windows can be made to load malicious DLL files stored in the same directory as the installer when it is run. This allows privileged execution if the installer is run with elevated privileges. Note: This attack only affects Windows operating systems. Other operating systems are unaffected.
Credit: security@mozilla.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Thunderbird | <52.2 | 52.2 |
| Firefox | <54.0 | |
| Firefox ESR | <52.2.0 | |
| Thunderbird | <52.2.0 | |
| Microsoft Windows | ||
| Firefox | <54 | 54 |
| Firefox ESR | <52.2 | 52.2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://bugzilla.mozilla.org/show_bug.cgi?id=1361326
- https://www.mozilla.org/en-US/security/advisories/mfsa2017-17/
- https://www.mozilla.org/en-US/security/advisories/mfsa2017-15/
- https://www.mozilla.org/en-US/security/advisories/mfsa2017-16/
- http://www.securityfocus.com/bid/99057
- http://www.securitytracker.com/id/1038689
- https://www.mozilla.org/security/advisories/mfsa2017-15/
- https://www.mozilla.org/security/advisories/mfsa2017-16/
- https://www.mozilla.org/security/advisories/mfsa2017-17/
Peer vulnerabilities
(Found alongside the following vulnerabilities)
- CVE-2017-5472
- CVE-2017-7749
- CVE-2017-7750
- CVE-2017-7751
- CVE-2017-7755
- CVE-2017-7752
- CVE-2017-7754
- CVE-2017-7756
- CVE-2017-7757
- CVE-2017-7778
- CVE-2017-7758
- CVE-2017-7763
- CVE-2017-7764
- CVE-2017-7765
- CVE-2017-5470
- CVE-2017-7759
- CVE-2017-7760
- CVE-2017-7761
- CVE-2017-7762
- CVE-2017-7766
- CVE-2017-7767
- CVE-2017-7768
- CVE-2017-7770
- CVE-2017-5471
Frequently Asked Questions
What is the severity of CVE-2017-7755?
CVE-2017-7755 is considered a high severity vulnerability due to its potential for privilege escalation in Windows environments.
How do I fix CVE-2017-7755?
To mitigate CVE-2017-7755, upgrade to Firefox versions above 54, Firefox ESR versions above 52.2, or Thunderbird versions above 52.2.
What platforms are affected by CVE-2017-7755?
CVE-2017-7755 specifically affects the Windows operating system when running vulnerable versions of Mozilla applications.
What applications are impacted by CVE-2017-7755?
CVE-2017-7755 impacts Mozilla Firefox, Firefox ESR, and Thunderbird versions up to specified thresholds.
Can CVE-2017-7755 be exploited by a remote attacker?
CVE-2017-7755 requires local execution of a compromised installer, so it is not a remote attack vector.
- agent/type
- agent/first-publish-date
- agent/weakness
- agent/references
- agent/severity
- agent/author
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/event
- agent/trending
- agent/source
- collector/mozilla-advisory
- agent/software-canonical-lookup-request
- collector/nvd-index
- source/Mozilla
- agent/software-canonical-lookup
- agent/softwarecombine
- agent/tags
- vendor/mozilla
- canonical/thunderbird
- canonical/firefox
- canonical/firefox esr
- vendor/microsoft
- canonical/microsoft windows