CVE-2017-7783: Input Validation
If a long user name is used in a username/password combination in a site URL (such as http://UserName:Password@example.com), the resulting modal prompt will hang in a non-responsive state or crash, causing a denial of service.
Other sources
If a long user name is used in a username/password combination in a site URL (such as " http://UserName:Password@example.com"), the resulting modal prompt will hang in a non-responsive state or crash, causing a denial of service. This vulnerability affects Firefox < 55.
Affected Software
Remediation
Patch Available
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
- CVE-2017-7798
- CVE-2017-7800
- CVE-2017-7801
- CVE-2017-7809
- CVE-2017-7784
- CVE-2017-7802
- CVE-2017-7785
- CVE-2017-7786
- CVE-2017-7806
- CVE-2017-7753
- CVE-2017-7787
- CVE-2017-7807
- CVE-2017-7792
- CVE-2017-7804
- CVE-2017-7791
- CVE-2017-7808
- CVE-2017-7782
- CVE-2017-7781
- CVE-2017-7794
- CVE-2017-7803
- CVE-2017-7799
- CVE-2017-7783
- CVE-2017-7788
- CVE-2017-7789
- CVE-2017-7790
- CVE-2017-7796
- CVE-2017-7797
- CVE-2017-7780
- CVE-2017-7779
Frequently Asked Questions
What is the severity of CVE-2017-7783?
CVE-2017-7783 is classified as a denial of service vulnerability that can cause the Firefox browser to hang or crash.
How do I fix CVE-2017-7783?
To fix CVE-2017-7783, update Firefox to version 55.0 or later.
Which versions of Firefox are affected by CVE-2017-7783?
CVE-2017-7783 affects Firefox versions prior to 55.0.
What type of attack does CVE-2017-7783 enable?
CVE-2017-7783 enables denial of service attacks through the use of excessively long usernames in URL-encoded authentication.
Is there a workaround for CVE-2017-7783?
There is no official workaround for CVE-2017-7783, but avoiding long usernames in URL-encoded authentication can help mitigate the issue.