CVE-2017-7807: Input Validation
A mechanism that uses AppCache to hijack a URL in a domain using fallback by serving the files from a sub-path on the domain. This has been addressed by requiring fallback files be inside the manifest directory.
Affected Software
Remediation
Patch Available
Event History
Parent advisories
This vulnerability appears in the following advisories.
Peer vulnerabilities
Found alongside the following vulnerabilities.
- CVE-2017-7800
- CVE-2017-7801
- CVE-2017-7809
- CVE-2017-7784
- CVE-2017-7802
- CVE-2017-7785
- CVE-2017-7786
- CVE-2017-7753
- CVE-2017-7787
- CVE-2017-7807
- CVE-2017-7792
- CVE-2017-7804
- CVE-2017-7791
- CVE-2017-7782
- CVE-2017-7803
- CVE-2017-7779
- CVE-2017-7798
- CVE-2017-7806
- CVE-2017-7808
- CVE-2017-7781
- CVE-2017-7794
- CVE-2017-7799
- CVE-2017-7783
- CVE-2017-7788
- CVE-2017-7789
- CVE-2017-7790
- CVE-2017-7796
- CVE-2017-7797
- CVE-2017-7780
Frequently Asked Questions
What is the severity of CVE-2017-7807?
CVE-2017-7807 has a moderate severity level due to its ability to hijack URLs using AppCache.
Which products are affected by CVE-2017-7807?
CVE-2017-7807 affects multiple products including Mozilla Firefox, Firefox ESR, and Thunderbird.
How do I fix CVE-2017-7807?
To fix CVE-2017-7807, update to the latest version of Firefox, Firefox ESR, or Thunderbird as specified in the security advisories.
What is the exploit mechanism for CVE-2017-7807?
The exploit mechanism for CVE-2017-7807 relies on AppCache to hijack a URL by serving fallback files from an unauthorized sub-path.
What versions of Firefox are vulnerable to CVE-2017-7807?
Versions of Firefox up to 55.0 are vulnerable to CVE-2017-7807.