CVE-2017-7820

Reference Links

• https://bugzilla.mozilla.org/show_bug.cgi?id=1378207
• https://www.mozilla.org/security/advisories/mfsa2017-21/
• http://www.securityfocus.com/bid/101057
• http://www.securitytracker.com/id/1039465
• https://launchpad.net/bugs/cve/CVE-2017-7820
• https://www.mozilla.org/en-US/security/advisories/mfsa2017-21/
• https://www.mozilla.org/en-US/security/advisories/mfsa2017-21/#CVE-2017-7822
• https://www.mozilla.org/en-US/security/advisories/mfsa2017-21/#CVE-2017-7820
• https://security-tracker.debian.org/tracker/CVE-2017-7820
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7820
• https://nvd.nist.gov/vuln/detail/CVE-2017-7820
• https://ubuntu.com/security/CVE-2017-7820

Parent vulnerabilities

(Appears in the following advisories)

• MFSA2017-21

Peer vulnerabilities

(Found alongside the following vulnerabilities)

• CVE-2017-7793
• CVE-2017-7817
• CVE-2017-7818
• CVE-2017-7819
• CVE-2017-7824
• CVE-2017-7805
• CVE-2017-7812
• CVE-2017-7814
• CVE-2017-7813
• CVE-2017-7825
• CVE-2017-7815
• CVE-2017-7816
• CVE-2017-7821
• CVE-2017-7823
• CVE-2017-7822
• CVE-2017-7820
• CVE-2017-7811
• CVE-2017-7810

Frequently Asked Questions

• What is the vulnerability ID?

  The vulnerability ID is CVE-2017-7820.

• Which software is affected by this vulnerability?

  This vulnerability affects Mozilla Firefox versions up to and including 56.0.3.

• What is the severity of CVE-2017-7820?

  The severity of CVE-2017-7820 is medium, with a CVSS score of 5.3.

• How can this vulnerability be exploited?

  This vulnerability can be exploited by using the instanceof operator on web content from the browser itself or an extension, tricking the browser or extension into mishandling the element.

• Is there a fix available for this vulnerability?

  Yes, the vulnerability can be fixed by updating Mozilla Firefox to version 56.0.3 or newer.