CVE-2017-7778

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2017-7778
A number of security vulnerabilities in the Graphite 2 library including out-of-bounds reads, buffer overflow reads and writes, and the use of uninitialized memory. These issues were addressed in Graphite 2 version 1.3.10. This vulnerability affects Firefox < 54, Firefox ESR < 52.2, and Thunderbird < 52.2.

9.8 /10

CVSS v3 : CRITICAL

V3 Legend

Vector : AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

7.5 /10

CVSS v2.0 : HIGH

V2 Legend

Vector : AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability : 10.0 / Impact : 6.4

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References
Link Resource
http://www.securityfocus.com/bid/99057 Third Party Advisory VDB Entry
http://www.securitytracker.com/id/1038689 Third Party Advisory VDB Entry
https://access.redhat.com/errata/RHSA-2017:1440 Third Party Advisory
https://access.redhat.com/errata/RHSA-2017:1561 Third Party Advisory
https://access.redhat.com/errata/RHSA-2017:1793 Third Party Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=1349310 Issue Tracking Vendor Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=1350047 Issue Tracking Vendor Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=1352745 Issue Tracking Vendor Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=1352747 Issue Tracking Vendor Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=1355174 Issue Tracking Vendor Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=1355182 Issue Tracking Vendor Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=1356607 Issue Tracking Vendor Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=1358551 Issue Tracking Vendor Advisory
https://security.gentoo.org/glsa/201710-13 Third Party Advisory
https://www.debian.org/security/2017/dsa-3881 Third Party Advisory
https://www.debian.org/security/2017/dsa-3894 Third Party Advisory
https://www.debian.org/security/2017/dsa-3918 Third Party Advisory
https://www.mozilla.org/security/advisories/mfsa2017-15/ Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2017-16/ Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2017-17/ Vendor Advisory
http://www.securityfocus.com/bid/99057 Third Party Advisory VDB Entry
http://www.securitytracker.com/id/1038689 Third Party Advisory VDB Entry
https://access.redhat.com/errata/RHSA-2017:1440 Third Party Advisory
https://access.redhat.com/errata/RHSA-2017:1561 Third Party Advisory
https://access.redhat.com/errata/RHSA-2017:1793 Third Party Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=1349310 Issue Tracking Vendor Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=1350047 Issue Tracking Vendor Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=1352745 Issue Tracking Vendor Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=1352747 Issue Tracking Vendor Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=1355174 Issue Tracking Vendor Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=1355182 Issue Tracking Vendor Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=1356607 Issue Tracking Vendor Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=1358551 Issue Tracking Vendor Advisory
https://security.gentoo.org/glsa/201710-13 Third Party Advisory
https://www.debian.org/security/2017/dsa-3881 Third Party Advisory
https://www.debian.org/security/2017/dsa-3894 Third Party Advisory
https://www.debian.org/security/2017/dsa-3918 Third Party Advisory
https://www.mozilla.org/security/advisories/mfsa2017-15/ Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2017-16/ Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2017-17/ Vendor Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*

Configuration 2 (hide)

OR cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*

Configuration 3 (hide)

cpe:2.3:a:sil:graphite2:*:*:*:*:*:*:*:*
History

21 Nov 2024, 03:32

Type Values Removed Values Added
References () http://www.securityfocus.com/bid/99057 - Third Party Advisory, VDB Entry () http://www.securityfocus.com/bid/99057 - Third Party Advisory, VDB Entry
References () http://www.securitytracker.com/id/1038689 - VDB Entry, Third Party Advisory () http://www.securitytracker.com/id/1038689 - Third Party Advisory, VDB Entry
References () https://access.redhat.com/errata/RHSA-2017:1440 - Third Party Advisory () https://access.redhat.com/errata/RHSA-2017:1440 - Third Party Advisory
References () https://access.redhat.com/errata/RHSA-2017:1561 - Third Party Advisory () https://access.redhat.com/errata/RHSA-2017:1561 - Third Party Advisory
References () https://access.redhat.com/errata/RHSA-2017:1793 - Third Party Advisory () https://access.redhat.com/errata/RHSA-2017:1793 - Third Party Advisory
References () https://bugzilla.mozilla.org/show_bug.cgi?id=1349310 - Issue Tracking, Vendor Advisory () https://bugzilla.mozilla.org/show_bug.cgi?id=1349310 - Issue Tracking, Vendor Advisory
References () https://bugzilla.mozilla.org/show_bug.cgi?id=1350047 - Issue Tracking, Vendor Advisory () https://bugzilla.mozilla.org/show_bug.cgi?id=1350047 - Issue Tracking, Vendor Advisory
References () https://bugzilla.mozilla.org/show_bug.cgi?id=1352745 - Issue Tracking, Vendor Advisory () https://bugzilla.mozilla.org/show_bug.cgi?id=1352745 - Issue Tracking, Vendor Advisory
References () https://bugzilla.mozilla.org/show_bug.cgi?id=1352747 - Issue Tracking, Vendor Advisory () https://bugzilla.mozilla.org/show_bug.cgi?id=1352747 - Issue Tracking, Vendor Advisory
References () https://bugzilla.mozilla.org/show_bug.cgi?id=1355174 - Issue Tracking, Vendor Advisory () https://bugzilla.mozilla.org/show_bug.cgi?id=1355174 - Issue Tracking, Vendor Advisory
References () https://bugzilla.mozilla.org/show_bug.cgi?id=1355182 - Issue Tracking, Vendor Advisory () https://bugzilla.mozilla.org/show_bug.cgi?id=1355182 - Issue Tracking, Vendor Advisory
References () https://bugzilla.mozilla.org/show_bug.cgi?id=1356607 - Issue Tracking, Vendor Advisory () https://bugzilla.mozilla.org/show_bug.cgi?id=1356607 - Issue Tracking, Vendor Advisory
References () https://bugzilla.mozilla.org/show_bug.cgi?id=1358551 - Issue Tracking, Vendor Advisory () https://bugzilla.mozilla.org/show_bug.cgi?id=1358551 - Issue Tracking, Vendor Advisory
References () https://security.gentoo.org/glsa/201710-13 - Third Party Advisory () https://security.gentoo.org/glsa/201710-13 - Third Party Advisory
References () https://www.debian.org/security/2017/dsa-3881 - Third Party Advisory () https://www.debian.org/security/2017/dsa-3881 - Third Party Advisory
References () https://www.debian.org/security/2017/dsa-3894 - Third Party Advisory () https://www.debian.org/security/2017/dsa-3894 - Third Party Advisory
References () https://www.debian.org/security/2017/dsa-3918 - Third Party Advisory () https://www.debian.org/security/2017/dsa-3918 - Third Party Advisory
References () https://www.mozilla.org/security/advisories/mfsa2017-15/ - Vendor Advisory () https://www.mozilla.org/security/advisories/mfsa2017-15/ - Vendor Advisory
References () https://www.mozilla.org/security/advisories/mfsa2017-16/ - Vendor Advisory () https://www.mozilla.org/security/advisories/mfsa2017-16/ - Vendor Advisory
References () https://www.mozilla.org/security/advisories/mfsa2017-17/ - Vendor Advisory () https://www.mozilla.org/security/advisories/mfsa2017-17/ - Vendor Advisory
Information

Published : 2018-06-11 21:29

Updated : 2024-11-21 03:32

NVD link : CVE-2017-7778

Mitre link : CVE-2017-7778

CVE.ORG link : CVE-2017-7778

JSON object : View

Products Affected

mozilla

  • firefox_esr
  • thunderbird
  • firefox

debian

  • debian_linux

sil

  • graphite2
CWE
CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE-125

Out-of-bounds Read

CWE-787

Out-of-bounds Write


NetmanageIT Website NetmanageIT OSINT Web NetmanageIT OpenCTI NetmanageIT PDF Tools NetmanageIT CTO Corner Blog NetmanageIT Email Header Analyzer NetmanageIT Password Pusher NetmanageIT Internet Health and Latency Dashboard NetmanageIT Dedicated Speed Test Site NetmanageIT Ubuntu Mirror 10Gbps Copyright OpenCVE 2024