CVE-2017-7792: Buffer Overflow
A buffer overflow will occur when viewing a certificate in the certificate manager if the certificate has an extremely long object identifier (OID). This results in a potentially exploitable crash.
Other sources
A buffer overflow with occur when viewing a certificate in the certificate manager if the certificate has a very long object identifier (OID). This results in a potentially exploitable crash.
External Reference:
https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7792
Acknowledgements:
Name: the Mozilla project Upstream: Fraser Tweedale
— Red Hat
Affected Software
Remediation
Patch Available
Event History
Parent advisories
This vulnerability appears in the following advisories.
Peer vulnerabilities
Found alongside the following vulnerabilities.
- CVE-2017-7800
- CVE-2017-7801
- CVE-2017-7809
- CVE-2017-7784
- CVE-2017-7802
- CVE-2017-7785
- CVE-2017-7786
- CVE-2017-7753
- CVE-2017-7787
- CVE-2017-7807
- CVE-2017-7792
- CVE-2017-7804
- CVE-2017-7791
- CVE-2017-7782
- CVE-2017-7803
- CVE-2017-7779
- CVE-2017-7798
- CVE-2017-7806
- CVE-2017-7808
- CVE-2017-7781
- CVE-2017-7794
- CVE-2017-7799
- CVE-2017-7783
- CVE-2017-7788
- CVE-2017-7789
- CVE-2017-7790
- CVE-2017-7796
- CVE-2017-7797
- CVE-2017-7780
Frequently Asked Questions
What is the severity of CVE-2017-7792?
CVE-2017-7792 has a high severity level due to the potential for a buffer overflow and system crashes.
How do I fix CVE-2017-7792?
To address CVE-2017-7792, users should update their Firefox or Thunderbird to the recommended version that resolves this vulnerability.
Which software is affected by CVE-2017-7792?
CVE-2017-7792 affects Firefox, Firefox ESR, and Thunderbird across various versions up to specified limits.
What happens if I don't resolve CVE-2017-7792?
Failing to resolve CVE-2017-7792 may leave your system vulnerable to crashes and potential exploitation.
Is CVE-2017-7792 a remote code execution vulnerability?
CVE-2017-7792 does not directly allow remote code execution but may lead to a crash that could be exploited.