CVE-2017-7794: High severity firefox vulnerability
On Linux systems, if the content process is compromised, the sandbox broker will allow files to be truncated even though the sandbox explicitly only has read access to the local file system and no write permissions. Note: This attack only affects the Linux operating system. Other operating systems are not affected.
Affected Software
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
- CVE-2017-7798
- CVE-2017-7800
- CVE-2017-7801
- CVE-2017-7809
- CVE-2017-7784
- CVE-2017-7802
- CVE-2017-7785
- CVE-2017-7786
- CVE-2017-7806
- CVE-2017-7753
- CVE-2017-7787
- CVE-2017-7807
- CVE-2017-7792
- CVE-2017-7804
- CVE-2017-7791
- CVE-2017-7808
- CVE-2017-7782
- CVE-2017-7781
- CVE-2017-7794
- CVE-2017-7803
- CVE-2017-7799
- CVE-2017-7783
- CVE-2017-7788
- CVE-2017-7789
- CVE-2017-7790
- CVE-2017-7796
- CVE-2017-7797
- CVE-2017-7780
- CVE-2017-7779
Frequently Asked Questions
What is the severity of CVE-2017-7794?
CVE-2017-7794 is classified as a moderate severity vulnerability affecting Firefox on Linux systems.
How do I fix CVE-2017-7794?
To fix CVE-2017-7794, update Mozilla Firefox to version 56 or later.
What systems are affected by CVE-2017-7794?
CVE-2017-7794 affects only Linux operating systems running Firefox version 55 or earlier.
What are the consequences of CVE-2017-7794?
Exploitation of CVE-2017-7794 can allow a compromised content process to truncate files despite restricted access.
Is CVE-2017-7794 limited to specific versions of Firefox?
Yes, CVE-2017-7794 affects Firefox versions up to and including 55.