CVE-2017-7798: Code Injection
The Developer Tools feature suffered from XUL injection vulnerability due to improper sanitization of the web page source code. In the worst case this could allow arbitrary code execution when opening a malicious page with the style editor tool.
External Reference:
https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7798
Acknowledgements:
Name: the Mozilla project Upstream: Frederik Braun
Other sources
The Developer Tools feature suffers from a XUL injection vulnerability due to improper sanitization of the web page source code. In the worst case, this could allow arbitrary code execution when opening a malicious page with the style editor tool.
Affected Software
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
- CVE-2017-7798
- CVE-2017-7800
- CVE-2017-7801
- CVE-2017-7809
- CVE-2017-7784
- CVE-2017-7802
- CVE-2017-7785
- CVE-2017-7786
- CVE-2017-7753
- CVE-2017-7787
- CVE-2017-7807
- CVE-2017-7792
- CVE-2017-7804
- CVE-2017-7791
- CVE-2017-7782
- CVE-2017-7803
- CVE-2017-7779
- CVE-2017-7806
- CVE-2017-7808
- CVE-2017-7781
- CVE-2017-7794
- CVE-2017-7799
- CVE-2017-7783
- CVE-2017-7788
- CVE-2017-7789
- CVE-2017-7790
- CVE-2017-7796
- CVE-2017-7797
- CVE-2017-7780
Frequently Asked Questions
What is the severity of CVE-2017-7798?
CVE-2017-7798 has a moderate severity rating due to the potential for arbitrary code execution.
How do I fix CVE-2017-7798?
To fix CVE-2017-7798, update Firefox or Firefox ESR to the latest version available.
Which versions of Firefox are affected by CVE-2017-7798?
CVE-2017-7798 affects Firefox versions up to 55 and Firefox ESR versions up to 52.3.
Can CVE-2017-7798 be exploited remotely?
Yes, CVE-2017-7798 can be exploited remotely by visiting a malicious web page that utilizes the style editor tool.
What type of vulnerability is CVE-2017-7798?
CVE-2017-7798 is a XUL injection vulnerability caused by improper sanitization of web page source code.