CVE-2017-7750 — CRITICAL (9.8)

Vulnerability Description

A use-after-free vulnerability during video control operations when a "<track>" element holds a reference to an older window if that window has been replaced in the DOM. This results in a potentially exploitable crash. This vulnerability affects Firefox < 54, Firefox ESR < 52.2, and Thunderbird < 52.2.

CVSS Score

9.8

CRITICAL

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

HIGH

Integrity

HIGH

Availability

HIGH

Affected Products

Vendor	Product	Versions
Debian	Debian Linux	8.0
Redhat	Enterprise Linux	6.0
Redhat	Enterprise Linux Desktop	6.0
Redhat	Enterprise Linux Server	6.0
Redhat	Enterprise Linux Server Aus	7.3
Redhat	Enterprise Linux Server Eus	7.3
Redhat	Enterprise Linux Workstation	6.0
Mozilla	Firefox	< 54.0
Mozilla	Thunderbird	< 52.2.0

Related Weaknesses (CWE)

CWE-416

References

http://www.securityfocus.com/bid/99057Third Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1038689Third Party AdvisoryVDB Entry
https://access.redhat.com/errata/RHSA-2017:1440Third Party Advisory
https://access.redhat.com/errata/RHSA-2017:1561Third Party Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=1356558ExploitIssue TrackingPatch
https://www.debian.org/security/2017/dsa-3881Third Party Advisory
https://www.debian.org/security/2017/dsa-3918Third Party Advisory
https://www.mozilla.org/security/advisories/mfsa2017-15/Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2017-16/Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2017-17/Vendor Advisory
http://www.securityfocus.com/bid/99057Third Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1038689Third Party AdvisoryVDB Entry
https://access.redhat.com/errata/RHSA-2017:1440Third Party Advisory
https://access.redhat.com/errata/RHSA-2017:1561Third Party Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=1356558ExploitIssue TrackingPatch

FAQ

What is CVE-2017-7750?

CVE-2017-7750 is a vulnerability with a CVSS score of 9.8 (CRITICAL). A use-after-free vulnerability during video control operations when a "<track>" element holds a reference to an older window if that window has been replaced in the DOM. This results in a potentially ...

How severe is CVE-2017-7750?

CVE-2017-7750 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.

Is there a patch for CVE-2017-7750?

Check the references section above for vendor advisories and patch information. Affected products include: Debian Debian Linux, Redhat Enterprise Linux, Redhat Enterprise Linux Desktop, Redhat Enterprise Linux Server, Redhat Enterprise Linux Server Aus.