CVE-2017-7782: mozilla firefox Improper Privilege Management
Vulnerability summary
CVE-2017-7782 is a medium (CVSS 5.3) Improper Privilege Management vulnerability in mozilla firefox. EPSS estimates a 1.06% chance of exploitation in the next 30 days, higher than 63.9% of scored vulnerabilities.
Advisory lineage
Upstream 0 · Downstream 7 · Related 6Timeline
- 11-06-2018PublishedVulnerability first disclosed.
- 05-08-2024Last modifiedVulnerability information updated.
Description
An error in the "WindowsDllDetourPatcher" where a RWX ("Read/Write/Execute") 4k block is allocated but never protected, violating DEP protections. Note: This attack only affects Windows operating systems. Other operating systems are not affected. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
1.06%
Chance of exploitation in the next 30 days
Percentile
64%
Versus all other CVEs
30-day change
-0.02 pp
From 1.08% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Mozilla3 products
- firefox≥ unspecified, < 55 | < 52.3.0 | < 55.0
- firefox_esr≥ unspecified, < 52.3
- thunderbird≥ unspecified, < 52.3 | < 52.3.0
1 vendor · 3 products