Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2017-7794

Опубликовано: 11 июн. 2018
Источник: nvd
CVSS3: 7.8
CVSS2: 4.6
EPSS Низкий

Описание

On Linux systems, if the content process is compromised, the sandbox broker will allow files to be truncated even though the sandbox explicitly only has read access to the local file system and no write permissions. Note: This attack only affects the Linux operating system. Other operating systems are not affected. This vulnerability affects Firefox < 55.

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*
Версия до 55.0 (исключая)
cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*

EPSS

Процентиль: 14%
0.00046
Низкий

7.8 High

CVSS3

4.6 Medium

CVSS2

Дефекты

CWE-276

Связанные уязвимости

CVSS3: 7.8
ubuntu
больше 7 лет назад

On Linux systems, if the content process is compromised, the sandbox broker will allow files to be truncated even though the sandbox explicitly only has read access to the local file system and no write permissions. Note: This attack only affects the Linux operating system. Other operating systems are not affected. This vulnerability affects Firefox < 55.

CVSS3: 7.8
redhat
больше 8 лет назад

On Linux systems, if the content process is compromised, the sandbox broker will allow files to be truncated even though the sandbox explicitly only has read access to the local file system and no write permissions. Note: This attack only affects the Linux operating system. Other operating systems are not affected. This vulnerability affects Firefox < 55.

CVSS3: 7.8
debian
больше 7 лет назад

On Linux systems, if the content process is compromised, the sandbox b ...

CVSS3: 7.8
github
больше 3 лет назад

On Linux systems, if the content process is compromised, the sandbox broker will allow files to be truncated even though the sandbox explicitly only has read access to the local file system and no write permissions. Note: This attack only affects the Linux operating system. Other operating systems are not affected. This vulnerability affects Firefox < 55.

CVSS3: 7.8
fstec
больше 8 лет назад

Уязвимость реализации процесса для запуска дочерних элементов в песочнице sandbox broker браузера Firefox, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации, нарушить ее целостность или вызвать отказ в обслуживании

EPSS

Процентиль: 14%
0.00046
Низкий

7.8 High

CVSS3

4.6 Medium

CVSS2

Дефекты

CWE-276