CVE-2017-7782: Medium severity thunderbird vulnerability
An error in the "WindowsDllDetourPatcher" where a RWX ("Read/Write/Execute") 4k block is allocated but never protected, violating DEP protections. Note: This attack only affects Windows operating systems. Other operating systems are not affected. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55.
Other sources
An error in the WindowsDllDetourPatcher where a RWX ("Read/Write/Execute") 4k block is allocated but never protected, violating DEP protections. Note: This attack only affects Windows operating systems. Other operating systems are not affected.
Affected Software
Remediation
Patch Available
Event History
Parent advisories
This vulnerability appears in the following advisories.
Peer vulnerabilities
Found alongside the following vulnerabilities.
- CVE-2017-7800
- CVE-2017-7801
- CVE-2017-7809
- CVE-2017-7784
- CVE-2017-7802
- CVE-2017-7785
- CVE-2017-7786
- CVE-2017-7753
- CVE-2017-7787
- CVE-2017-7807
- CVE-2017-7792
- CVE-2017-7804
- CVE-2017-7791
- CVE-2017-7782
- CVE-2017-7803
- CVE-2017-7779
- CVE-2017-7798
- CVE-2017-7806
- CVE-2017-7808
- CVE-2017-7781
- CVE-2017-7794
- CVE-2017-7799
- CVE-2017-7783
- CVE-2017-7788
- CVE-2017-7789
- CVE-2017-7790
- CVE-2017-7796
- CVE-2017-7797
- CVE-2017-7780
Frequently Asked Questions
What is the severity of CVE-2017-7782?
CVE-2017-7782 has been classified as a moderate severity vulnerability due to its potential to bypass Data Execution Prevention (DEP) protections.
How do I fix CVE-2017-7782?
To mitigate CVE-2017-7782, update Firefox and Thunderbird to versions 55 and 52.3 or later respectively.
Which software is affected by CVE-2017-7782?
CVE-2017-7782 affects Mozilla Firefox versions prior to 55, Mozilla Firefox ESR versions prior to 52.3, and Mozilla Thunderbird versions prior to 52.3.
Does CVE-2017-7782 affect operating systems other than Windows?
CVE-2017-7782 only affects Windows operating systems and does not impact other operating systems.
What type of allocation issue is described in CVE-2017-7782?
CVE-2017-7782 involves the allocation of a RWX 4k memory block that is not adequately protected, violating DEP security measures.