CVE-2017-7799: XSS
JavaScript in the "about:webrtc" page is not sanitized properly being assigned to "innerHTML". Data on this page is supplied by WebRTC usage and is not under third-party control, making this difficult to exploit, but the vulnerability could possibly be used for a cross-site scripting (XSS) attack. This vulnerability affects Firefox < 55.
Other sources
JavaScript in the about:webrtc page is not sanitized properly being assigned to innerHTML. Data on this page is supplied by WebRTC usage and is not under third-party control, making this difficult to exploit, but the vulnerability could possibly be used for a cross-site scripting (XSS) attack.
Affected Software
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
- CVE-2017-7798
- CVE-2017-7800
- CVE-2017-7801
- CVE-2017-7809
- CVE-2017-7784
- CVE-2017-7802
- CVE-2017-7785
- CVE-2017-7786
- CVE-2017-7806
- CVE-2017-7753
- CVE-2017-7787
- CVE-2017-7807
- CVE-2017-7792
- CVE-2017-7804
- CVE-2017-7791
- CVE-2017-7808
- CVE-2017-7782
- CVE-2017-7781
- CVE-2017-7794
- CVE-2017-7803
- CVE-2017-7799
- CVE-2017-7783
- CVE-2017-7788
- CVE-2017-7789
- CVE-2017-7790
- CVE-2017-7796
- CVE-2017-7797
- CVE-2017-7780
- CVE-2017-7779
Frequently Asked Questions
What is the severity of CVE-2017-7799?
CVE-2017-7799 has a low severity rating due to the difficulty of exploitation.
How do I fix CVE-2017-7799?
To fix CVE-2017-7799, upgrade to Mozilla Firefox version 55 or later.
Which versions of Firefox are affected by CVE-2017-7799?
CVE-2017-7799 affects Mozilla Firefox versions prior to 55.
Can CVE-2017-7799 lead to a successful XSS attack?
CVE-2017-7799 could potentially be exploited for a cross-site scripting (XSS) attack, although it is considered difficult.
What component is vulnerable in CVE-2017-7799?
The vulnerability in CVE-2017-7799 is related to improper sanitization of JavaScript in the 'about:webrtc' page.