CVE-2017-7763: Input Validation

Reference Links

• https://bugzilla.mozilla.org/show_bug.cgi?id=1360309
• https://www.mozilla.org/en-US/security/advisories/mfsa2017-17/
• https://www.mozilla.org/en-US/security/advisories/mfsa2017-15/
• https://www.mozilla.org/en-US/security/advisories/mfsa2017-16/
• http://www.securityfocus.com/bid/99057
• http://www.securitytracker.com/id/1038689
• https://www.mozilla.org/security/advisories/mfsa2017-15/
• https://www.mozilla.org/security/advisories/mfsa2017-16/
• https://www.mozilla.org/security/advisories/mfsa2017-17/

Parent vulnerabilities

(Appears in the following advisories)

• MFSA2017-17
• MFSA2017-15
• MFSA2017-16

Peer vulnerabilities

(Found alongside the following vulnerabilities)

• CVE-2017-5472
• CVE-2017-7749
• CVE-2017-7750
• CVE-2017-7751
• CVE-2017-7755
• CVE-2017-7752
• CVE-2017-7754
• CVE-2017-7756
• CVE-2017-7757
• CVE-2017-7778
• CVE-2017-7758
• CVE-2017-7763
• CVE-2017-7764
• CVE-2017-7765
• CVE-2017-5470
• CVE-2017-7759
• CVE-2017-7760
• CVE-2017-7761
• CVE-2017-7762
• CVE-2017-7766
• CVE-2017-7767
• CVE-2017-7768
• CVE-2017-7770
• CVE-2017-5471

Frequently Asked Questions

• What is the severity of CVE-2017-7763?

  CVE-2017-7763 is classified as a moderate severity vulnerability due to its potential for domain name spoofing on OS X.

• How do I fix CVE-2017-7763?

  To fix CVE-2017-7763, upgrade to Mozilla Thunderbird version 52.2, Firefox ESR version 52.2, or Firefox version 54 or later.

• Who is affected by CVE-2017-7763?

  CVE-2017-7763 specifically affects users of Mozilla Thunderbird, Firefox ESR, and Firefox on OS X operating systems.

• What type of attack does CVE-2017-7763 enable?

  CVE-2017-7763 enables domain name spoofing attacks through improper rendering of Tibetan characters in the OS X address bar.

• Is CVE-2017-7763 a risk for other operating systems?

  No, CVE-2017-7763 only affects OS X operating systems and does not pose a risk to other platforms.