CVE-2017-7798

State: Published
Severity: Not scored
Published: Jun 11, 2018
Updated: Aug 5, 2024
Reserved: Apr 12, 2017

Description

The Developer Tools feature suffers from a XUL injection vulnerability due to improper sanitization of the web page source code. In the worst case, this could allow arbitrary code execution when opening a malicious page with the style editor tool. This vulnerability affects Firefox ESR < 52.3 and Firefox < 55.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
Firefox ESRMozilla	before 52.3Affected
FirefoxMozilla	before 55Affected

References

https://www.mozilla.org/security/advisories/mfsa2017-19/
100198vdb-entry
https://www.mozilla.org/security/advisories/mfsa2017-18/
RHSA-2017:2456vendor-advisory
https://bugzilla.mozilla.org/buglist.cgi?bug_id=1371586%2C1372112
1039124vdb-entry
DSA-3928vendor-advisory

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.