CVE-2017-7790: High severity firefox vulnerability
On Windows systems, if non-null-terminated strings are copied into the crash reporter for some specific registry keys, stack memory data can be copied until a null is found. This can potentially contain private data from the local system. Note: This attack only affects Windows operating systems. Other operating systems are not affected.
Affected Software
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
- CVE-2017-7798
- CVE-2017-7800
- CVE-2017-7801
- CVE-2017-7809
- CVE-2017-7784
- CVE-2017-7802
- CVE-2017-7785
- CVE-2017-7786
- CVE-2017-7806
- CVE-2017-7753
- CVE-2017-7787
- CVE-2017-7807
- CVE-2017-7792
- CVE-2017-7804
- CVE-2017-7791
- CVE-2017-7808
- CVE-2017-7782
- CVE-2017-7781
- CVE-2017-7794
- CVE-2017-7803
- CVE-2017-7799
- CVE-2017-7783
- CVE-2017-7788
- CVE-2017-7789
- CVE-2017-7790
- CVE-2017-7796
- CVE-2017-7797
- CVE-2017-7780
- CVE-2017-7779
Frequently Asked Questions
What is the severity of CVE-2017-7790?
CVE-2017-7790 is considered a high severity vulnerability affecting Firefox on Windows systems.
How do I fix CVE-2017-7790?
To fix CVE-2017-7790, upgrade to Firefox version 56 or later.
What systems are affected by CVE-2017-7790?
CVE-2017-7790 specifically affects Windows operating systems running Firefox version 55 or earlier.
What type of data can be exposed due to CVE-2017-7790?
Due to CVE-2017-7790, stack memory data potentially containing private information from the local system can be exposed.
Is CVE-2017-7790 related to specific registry keys in Windows?
Yes, CVE-2017-7790 involves non-null-terminated strings copied into the crash reporter for specific registry keys.