CVE-2017-7836: High severity firefox vulnerability
The "pingsender" executable used by the Firefox Health Report dynamically loads a system copy of libcurl, which an attacker could replace. This allows for privilege escalation as the replaced libcurl code will run with Firefox's privileges. Note: This attack requires an attacker have local system access and only affects OS X and Linux. Windows systems are not affected.
Affected Software
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is CVE-2017-7836?
CVE-2017-7836 is a vulnerability that allows an attacker to replace the system copy of libcurl used by the Firefox Health Report, leading to privilege escalation.
What software is affected by CVE-2017-7836?
Mozilla Firefox versions up to and including 57.0.2 are affected by CVE-2017-7836.
What is the severity of CVE-2017-7836?
CVE-2017-7836 has a severity score of 7.8 (high).
How can I fix CVE-2017-7836?
To fix CVE-2017-7836, upgrade to Mozilla Firefox version 58 or later.
Where can I find more information about CVE-2017-7836?
More information about CVE-2017-7836 can be found at the following references: [link1], [link2], [link3].