Vulnerability Name:

CVE-2017-7809 (CCN-130187)

Assigned:2017-08-08
Published:2017-08-08
Updated:2018-08-03
Summary:A use-after-free vulnerability can occur when an editor DOM node is deleted prematurely during tree traversal while still bound to the document. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55.
CVSS v3 Severity:9.8 Critical (CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
8.5 High (Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C)
Exploitability Metrics:Attack Vector (AV): Network
Attack Complexity (AC): Low
Privileges Required (PR): None
User Interaction (UI): None
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): High
Integrity (I): High
Availibility (A): High
6.5 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N)
5.7 Medium (CCN Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C)
Exploitability Metrics:Attack Vector (AV): Network
Attack Complexity (AC): Low
Privileges Required (PR): None
User Interaction (UI): Required
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): None
Integrity (I): High
Availibility (A): None
9.8 Critical (REDHAT CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
8.5 High (REDHAT Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C)
Exploitability Metrics:Attack Vector (AV): Network
Attack Complexity (AC): Low
Privileges Required (PR): None
User Interaction (UI): None
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): High
Integrity (I): High
Availibility (A): High
CVSS v2 Severity:7.5 High (CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Low
Authentication (Au): None
Impact Metrics:Confidentiality (C): Partial
Integrity (I): Partial
Availibility (A): Partial
6.8 Medium (CCN CVSS v2 Vector: AV:N/AC:L/Au:S/C:N/I:C/A:N)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Low
Athentication (Au): Single_Instance
Impact Metrics:Confidentiality (C): None
Integrity (I): Complete
Availibility (A): None
Vulnerability Type:CWE-416
Vulnerability Consequences:Gain Access
References:Source: MITRE
Type: CNA
CVE-2017-7809

Source: CCN
Type: IBM Security Bulletin S1010746 (Scale Out Network Attached Storage)
Multiple Mozilla Firefox vulnerability issues in IBM SONAS

Source: BID
Type: Third Party Advisory, VDB Entry
100203

Source: CCN
Type: BID-100203
Mozilla Firefox and Firefox ESR CVE-2017-7809 Use After Free Remote Code Execution Vulnerability

Source: SECTRACK
Type: Third Party Advisory, VDB Entry
1039124

Source: REDHAT
Type: Third Party Advisory
RHSA-2017:2456

Source: REDHAT
Type: Third Party Advisory
RHSA-2017:2534

Source: CONFIRM
Type: Exploit, Issue Tracking, Vendor Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=1380284

Source: XF
Type: UNKNOWN
firefox-cve20177809-code-exec(130187)

Source: GENTOO
Type: Third Party Advisory
GLSA-201803-14

Source: DEBIAN
Type: Third Party Advisory
DSA-3928

Source: DEBIAN
Type: Third Party Advisory
DSA-3968

Source: CCN
Type: Mozilla Foundation Security Advisory 2017-18
Security vulnerabilities fixed in Firefox 55

Source: CCN
Type: Mozilla Foundation Security Advisory 2017-19
Security vulnerabilities fixed in Firefox ESR 52.3

Source: CONFIRM
Type: Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2017-18/

Source: CONFIRM
Type: Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2017-19/

Source: CONFIRM
Type: Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2017-20/

Vulnerable Configuration:Configuration 1:
  • cpe:/o:debian:debian_linux:8.0:*:*:*:*:*:*:*
  • OR cpe:/o:debian:debian_linux:9.0:*:*:*:*:*:*:*

    • Configuration 2:
  • cpe:/o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*
  • OR cpe:/o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*
  • OR cpe:/o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*
  • OR cpe:/o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*
  • OR cpe:/o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*
  • OR cpe:/o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*
  • OR cpe:/o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*
  • OR cpe:/o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*
  • OR cpe:/o:redhat:enterprise_linux_server_eus:7.3:*:*:*:*:*:*:*
  • OR cpe:/o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*
  • OR cpe:/o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*
  • OR cpe:/o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*
  • OR cpe:/o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*

    • Configuration 3:
  • cpe:/a:mozilla:firefox:*:*:*:*:*:*:*:* (Version < 55.0)

    • Configuration 4:
  • cpe:/a:mozilla:firefox_esr:*:*:*:*:*:*:*:* (Version < 52.3.0)

    • Configuration 5:
  • cpe:/a:mozilla:thunderbird:*:*:*:*:*:*:*:* (Version < 52.3.0)

    • Configuration RedHat 1:
  • cpe:/o:redhat:enterprise_linux:6:*:*:*:*:*:*:*

    • Configuration RedHat 2:
  • cpe:/o:redhat:enterprise_linux:6::client:*:*:*:*:*

    • Configuration RedHat 3:
  • cpe:/o:redhat:enterprise_linux:6::computenode:*:*:*:*:*

    • Configuration RedHat 4:
  • cpe:/o:redhat:enterprise_linux:6::server:*:*:*:*:*

    • Configuration RedHat 5:
  • cpe:/o:redhat:enterprise_linux:6::workstation:*:*:*:*:*

    • Configuration RedHat 6:
  • cpe:/o:redhat:enterprise_linux:7:*:*:*:*:*:*:*

    • Configuration RedHat 7:
  • cpe:/o:redhat:enterprise_linux:7::client:*:*:*:*:*

    • Configuration RedHat 8:
  • cpe:/o:redhat:enterprise_linux:7::server:*:*:*:*:*

    • Configuration RedHat 9:
  • cpe:/o:redhat:enterprise_linux:7::workstation:*:*:*:*:*

    • Configuration CCN 1:
  • cpe:/a:mozilla:firefox:54.0:*:*:*:*:*:*:*
  • OR cpe:/a:mozilla:firefox_esr:52.2.0:*:*:*:*:*:*:*

    • * Denotes that component is vulnerable
    Oval Definitions
    Definition IDClassTitleLast Modified
    oval:org.opensuse.security:def:20177809
    V
    		CVE-2017-7809
    2022-06-30
    oval:org.opensuse.security:def:111899
    P
    		MozillaFirefox-92.0-1.2 on GA media (Moderate)
    2022-01-17
    oval:org.opensuse.security:def:105476
    P
    		MozillaFirefox-92.0-1.2 on GA media (Moderate)
    2021-10-01
    oval:com.ubuntu.disco:def:201778090000000
    V
    		CVE-2017-7809 on Ubuntu 19.04 (disco) - medium.
    2018-06-11
    oval:com.ubuntu.cosmic:def:20177809000
    V
    		CVE-2017-7809 on Ubuntu 18.10 (cosmic) - medium.
    2018-06-11
    oval:com.ubuntu.cosmic:def:201778090000000
    V
    		CVE-2017-7809 on Ubuntu 18.10 (cosmic) - medium.
    2018-06-11
    oval:com.ubuntu.trusty:def:20177809000
    V
    		CVE-2017-7809 on Ubuntu 14.04 LTS (trusty) - medium.
    2018-06-11
    oval:com.ubuntu.bionic:def:201778090000000
    V
    		CVE-2017-7809 on Ubuntu 18.04 LTS (bionic) - medium.
    2018-06-11
    oval:com.ubuntu.artful:def:20177809000
    V
    		CVE-2017-7809 on Ubuntu 17.10 (artful) - medium.
    2018-06-11
    oval:com.ubuntu.xenial:def:20177809000
    V
    		CVE-2017-7809 on Ubuntu 16.04 LTS (xenial) - medium.
    2018-06-11
    oval:com.ubuntu.xenial:def:201778090000000
    V
    		CVE-2017-7809 on Ubuntu 16.04 LTS (xenial) - medium.
    2018-06-11
    oval:com.ubuntu.bionic:def:20177809000
    V
    		CVE-2017-7809 on Ubuntu 18.04 LTS (bionic) - medium.
    2018-06-11
    oval:com.redhat.rhsa:def:20172534
    P
    		RHSA-2017:2534: thunderbird security update (Important)
    2017-08-24
    oval:com.redhat.rhsa:def:20172456
    P
    		RHSA-2017:2456: firefox security update (Critical)
    2017-08-10
    BACK
    debian debian linux 8.0
    debian debian linux 9.0
    redhat enterprise linux 6.0
    redhat enterprise linux 7.0
    redhat enterprise linux desktop 6.0
    redhat enterprise linux desktop 7.0
    redhat enterprise linux server 6.0
    redhat enterprise linux server 7.0
    redhat enterprise linux server aus 7.3
    redhat enterprise linux server aus 7.4
    redhat enterprise linux server eus 7.3
    redhat enterprise linux server eus 7.4
    redhat enterprise linux server eus 7.5
    redhat enterprise linux workstation 6.0
    redhat enterprise linux workstation 7.0
    mozilla firefox *
    mozilla firefox esr *
    mozilla thunderbird *
    mozilla firefox 54.0
    mozilla firefox esr 52.2.0