CVE-2017-7785: Buffer Overflow
A buffer overflow can occur when manipulating Accessible Rich Internet Applications (ARIA) attributes within the DOM. This results in a potentially exploitable crash.
Affected Software
Event History
Parent advisories
This vulnerability appears in the following advisories.
Peer vulnerabilities
Found alongside the following vulnerabilities.
- CVE-2017-7800
- CVE-2017-7801
- CVE-2017-7809
- CVE-2017-7784
- CVE-2017-7802
- CVE-2017-7785
- CVE-2017-7786
- CVE-2017-7753
- CVE-2017-7787
- CVE-2017-7807
- CVE-2017-7792
- CVE-2017-7804
- CVE-2017-7791
- CVE-2017-7782
- CVE-2017-7803
- CVE-2017-7779
- CVE-2017-7798
- CVE-2017-7806
- CVE-2017-7808
- CVE-2017-7781
- CVE-2017-7794
- CVE-2017-7799
- CVE-2017-7783
- CVE-2017-7788
- CVE-2017-7789
- CVE-2017-7790
- CVE-2017-7796
- CVE-2017-7797
- CVE-2017-7780
Frequently Asked Questions
What is the severity of CVE-2017-7785?
CVE-2017-7785 has a high severity rating due to the potential for a buffer overflow leading to crashes and exploitation.
How do I fix CVE-2017-7785?
To fix CVE-2017-7785, update to the latest version of the affected software, such as Firefox 118.0.2-1 or the latest Firefox ESR release.
Which software is affected by CVE-2017-7785?
CVE-2017-7785 affects Mozilla Firefox, Firefox ESR, and Thunderbird on various Debian and Red Hat versions.
What are the potential consequences of exploiting CVE-2017-7785?
Exploiting CVE-2017-7785 could lead to application crashes and potentially allow unauthorized access to system memory.
Is CVE-2017-7785 a remote exploitation risk?
Yes, CVE-2017-7785 poses a risk of remote exploitation if an attacker can manipulate ARIA attributes in the DOM.