CVE-2017-7845: Buffer Overflow
A buffer overflow occurs when drawing and validating elements using Direct 3D 9 with the ANGLE graphics library, used for WebGL content. This is due to an incorrect value being passed within the library during checks and results in a potentially exploitable crash. Note: This attack only affects Windows operating systems. Other operating systems are unaffected.
Affected Software
Event History
Parent advisories
This vulnerability appears in the following advisories.
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is CVE-2017-7845?
CVE-2017-7845 is a vulnerability that occurs when drawing and validating elements using Direct3D 9 with the ANGLE graphics library.
How does CVE-2017-7845 affect Mozilla Firefox?
CVE-2017-7845 affects Mozilla Firefox versions up to and excluding 57.0.2
How does CVE-2017-7845 affect Mozilla Thunderbird?
CVE-2017-7845 affects Mozilla Thunderbird version 52.5.2
What is the severity of CVE-2017-7845?
CVE-2017-7845 has a severity rating of 8.8 (critical)
How can I fix CVE-2017-7845?
To fix CVE-2017-7845, update Mozilla Firefox to version 57.0.2 or later, or update Mozilla Thunderbird to version 52.5.2 or later.