CVE-2017-7781: Medium severity firefox vulnerability
An error occurs in the elliptic curve point addition algorithm that uses mixed Jacobian-affine coordinates where it can yield a result "POINTATINFINITY" when it should not. A man-in-the-middle attacker could use this to interfere with a connection, resulting in an attacked party computing an incorrect shared secret. This vulnerability affects Firefox < 55.
Other sources
An error occurs in the elliptic curve point addition algorithm that uses mixed Jacobian-affine coordinates where it can yield a result POINTATINFINITY when it should not. A man-in-the-middle attacker could use this to interfere with a connection, resulting in an attacked party computing an incorrect shared secret.
Affected Software
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
- CVE-2017-7798
- CVE-2017-7800
- CVE-2017-7801
- CVE-2017-7809
- CVE-2017-7784
- CVE-2017-7802
- CVE-2017-7785
- CVE-2017-7786
- CVE-2017-7806
- CVE-2017-7753
- CVE-2017-7787
- CVE-2017-7807
- CVE-2017-7792
- CVE-2017-7804
- CVE-2017-7791
- CVE-2017-7808
- CVE-2017-7782
- CVE-2017-7781
- CVE-2017-7794
- CVE-2017-7803
- CVE-2017-7799
- CVE-2017-7783
- CVE-2017-7788
- CVE-2017-7789
- CVE-2017-7790
- CVE-2017-7796
- CVE-2017-7797
- CVE-2017-7780
- CVE-2017-7779
Frequently Asked Questions
What is the severity of CVE-2017-7781?
CVE-2017-7781 has a moderate severity level, which indicates it poses a potential security risk.
How do I fix CVE-2017-7781?
To fix CVE-2017-7781, update Firefox to version 56 or later, as this version includes a patch for the vulnerability.
Who is affected by CVE-2017-7781?
CVE-2017-7781 affects users running Mozilla Firefox versions prior to 56.
What type of vulnerability is CVE-2017-7781?
CVE-2017-7781 is a cryptographic vulnerability in the elliptic curve point addition algorithm used in Firefox.
Can CVE-2017-7781 lead to data loss?
CVE-2017-7781 could potentially lead to data interception, which may compromise the confidentiality of the data being transmitted.