CVE-2017-7809: Use After Free
A use-after-free vulnerability can occur when an editor DOM node is deleted prematurely during tree traversal while still bound to the document. This results in a potentially exploitable crash.
Affected Software
Event History
Parent advisories
This vulnerability appears in the following advisories.
Peer vulnerabilities
Found alongside the following vulnerabilities.
- CVE-2017-7800
- CVE-2017-7801
- CVE-2017-7809
- CVE-2017-7784
- CVE-2017-7802
- CVE-2017-7785
- CVE-2017-7786
- CVE-2017-7753
- CVE-2017-7787
- CVE-2017-7807
- CVE-2017-7792
- CVE-2017-7804
- CVE-2017-7791
- CVE-2017-7782
- CVE-2017-7803
- CVE-2017-7779
- CVE-2017-7798
- CVE-2017-7806
- CVE-2017-7808
- CVE-2017-7781
- CVE-2017-7794
- CVE-2017-7799
- CVE-2017-7783
- CVE-2017-7788
- CVE-2017-7789
- CVE-2017-7790
- CVE-2017-7796
- CVE-2017-7797
- CVE-2017-7780
Frequently Asked Questions
What is the severity of CVE-2017-7809?
CVE-2017-7809 is classified as a use-after-free vulnerability that may lead to a potentially exploitable crash.
How do I fix CVE-2017-7809?
To fix CVE-2017-7809, users should upgrade to the latest patched version of affected software such as Firefox 118.0.2-1 or Firefox ESR versions listed.
What software is affected by CVE-2017-7809?
The vulnerability affects various versions of Firefox, Firefox ESR, and Thunderbird prior to specified versions.
What are the potential consequences of CVE-2017-7809?
CVE-2017-7809 may allow attackers to exploit the crash, potentially leading to unauthorized access or information leakage.
When was CVE-2017-7809 discovered?
CVE-2017-7809 was disclosed in 2017 as part of a series of vulnerabilities identified in Mozilla products.