CVE-2017-7784

EUVD-2017-16759
A use-after-free vulnerability can occur when reading an image observer during frame reconstruction after the observer has been freed. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
9.8 CRITICAL
NETWORK
LOW
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 89%
Affected Products (NVD)
VendorProductVersion
debiandebian_linux
8.0
debiandebian_linux
9.0
redhatenterprise_linux
5.0
redhatenterprise_linux
6.0
redhatenterprise_linux
7.0
redhatenterprise_linux_desktop
5.0
redhatenterprise_linux_desktop
6.0
redhatenterprise_linux_desktop
7.0
redhatenterprise_linux_server
5.0
redhatenterprise_linux_server
6.0
redhatenterprise_linux_server
7.0
redhatenterprise_linux_server_aus
7.3
redhatenterprise_linux_server_aus
7.4
redhatenterprise_linux_server_eus
7.3
redhatenterprise_linux_server_eus
7.4
redhatenterprise_linux_server_eus
7.5
redhatenterprise_linux_workstation
5.0
redhatenterprise_linux_workstation
6.0
redhatenterprise_linux_workstation
7.0
mozillathunderbird
𝑥
< 52.3.0
mozillafirefox
𝑥
< 55.0
mozillafirefox_esr
𝑥
< 52.3
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
firefox
sid
132.0.1-1
fixed
firefox-esr
bookworm
115.14.0esr-1~deb12u1
fixed
bookworm (security)
128.4.0esr-1~deb12u1
fixed
bullseye
115.14.0esr-1~deb11u1
fixed
bullseye (security)
128.4.0esr-1~deb11u1
fixed
sid
128.4.0esr-1
fixed
trixie
128.3.1esr-2
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
firefox
artful
Fixed 55.0.2+build1-0ubuntu4
released
bionic
Fixed 55.0.2+build1-0ubuntu4
released
cosmic
Fixed 55.0.2+build1-0ubuntu4
released
disco
Fixed 55.0.2+build1-0ubuntu4
released
eoan
Fixed 55.0.2+build1-0ubuntu4
released
focal
Fixed 55.0.2+build1-0ubuntu4
released
groovy
Fixed 55.0.2+build1-0ubuntu4
released
hirsute
Fixed 55.0.2+build1-0ubuntu4
released
impish
Fixed 55.0.2+build1-0ubuntu4
released
jammy
Fixed 55.0.2+build1-0ubuntu4
released
kinetic
Fixed 55.0.2+build1-0ubuntu4
released
lunar
Fixed 55.0.2+build1-0ubuntu4
released
mantic
Fixed 55.0.2+build1-0ubuntu4
released
noble
Fixed 55.0.2+build1-0ubuntu4
released
trusty
Fixed 55.0.1+build2-0ubuntu0.14.04.2
released
xenial
Fixed 55.0.1+build2-0ubuntu0.16.04.2
released
zesty
Fixed 55.0.1+build2-0ubuntu0.17.04.2
released
mozjs38
artful
ignored
bionic
ignored
cosmic
dne
disco
dne
eoan
dne
focal
dne
groovy
dne
hirsute
dne
impish
dne
jammy
dne
kinetic
dne
lunar
dne
mantic
dne
noble
dne
trusty
dne
xenial
dne
zesty
ignored
thunderbird
artful
Fixed 1:52.4.0+build1-0ubuntu2
released
bionic
Fixed 1:52.4.0+build1-0ubuntu2
released
cosmic
Fixed 1:52.4.0+build1-0ubuntu2
released
disco
Fixed 1:52.4.0+build1-0ubuntu2
released
eoan
Fixed 1:52.4.0+build1-0ubuntu2
released
focal
Fixed 1:52.4.0+build1-0ubuntu2
released
groovy
Fixed 1:52.4.0+build1-0ubuntu2
released
hirsute
Fixed 1:52.4.0+build1-0ubuntu2
released
impish
Fixed 1:52.4.0+build1-0ubuntu2
released
jammy
Fixed 1:52.4.0+build1-0ubuntu2
released
kinetic
Fixed 1:52.4.0+build1-0ubuntu2
released
lunar
Fixed 1:52.4.0+build1-0ubuntu2
released
mantic
Fixed 1:52.4.0+build1-0ubuntu2
released
noble
Fixed 1:52.4.0+build1-0ubuntu2
released
trusty
Fixed 1:52.3.0+build1-0ubuntu0.14.04.1
released
xenial
Fixed 1:52.3.0+build1-0ubuntu0.16.04.1
released
zesty
Fixed 1:52.3.0+build1-0ubuntu0.17.04.1
released