CVE-2017-7784: Use After Free
A use-after-free vulnerability can occur when reading an image observer during frame reconstruction after the observer has been freed. This results in a potentially exploitable crash.
Other sources
A use-after-free vulnerability when reading an image observer during frame reconstruction after the observer has been freed. This results in a potentially exploitable crash.
External Reference:
https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7784
Acknowledgements:
Name: the Mozilla project Upstream: Nils
— Red Hat
Affected Software
Event History
Parent advisories
This vulnerability appears in the following advisories.
Peer vulnerabilities
Found alongside the following vulnerabilities.
- CVE-2017-7800
- CVE-2017-7801
- CVE-2017-7809
- CVE-2017-7784
- CVE-2017-7802
- CVE-2017-7785
- CVE-2017-7786
- CVE-2017-7753
- CVE-2017-7787
- CVE-2017-7807
- CVE-2017-7792
- CVE-2017-7804
- CVE-2017-7791
- CVE-2017-7782
- CVE-2017-7803
- CVE-2017-7779
- CVE-2017-7798
- CVE-2017-7806
- CVE-2017-7808
- CVE-2017-7781
- CVE-2017-7794
- CVE-2017-7799
- CVE-2017-7783
- CVE-2017-7788
- CVE-2017-7789
- CVE-2017-7790
- CVE-2017-7796
- CVE-2017-7797
- CVE-2017-7780
Frequently Asked Questions
What is the severity of CVE-2017-7784?
CVE-2017-7784 is classified as a potentially exploitable vulnerability and could lead to application crashes.
How do I fix CVE-2017-7784?
To fix CVE-2017-7784, update to the latest versions of affected software, including Firefox 118.0.2-1 and various versions of Firefox ESR.
What software is affected by CVE-2017-7784?
CVE-2017-7784 affects Mozilla Firefox, Firefox ESR, and Thunderbird versions prior to their specified updates.
Can CVE-2017-7784 be exploited remotely?
CVE-2017-7784 can potentially be exploited remotely during image processing tasks in the affected applications.
Is CVE-2017-7784 still a risk in supported versions?
No, CVE-2017-7784 is mitigated in supported versions of affected applications after applying the appropriate updates.