Denial of service in Mozilla Firefox - CVE-2017-7783

Vulnerability identifier: #VU7848

CSH Severity: Low

CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2017-7783

CWE-ID: CWE-20

Exploitation vector: Remote access

Exploit availability: Public exploit is available

The vulnerability allows a remote attacker to cause DoS condition on the target system.

The weakness exists due to improper input validation. A remote attacker can trick the victim into visiting a specially crafted website containing a specially crafted username and password combination, trigger modal prompt and cause the browser to crash.

Successful exploitation of the vulnerability results in denial of service.

Mozilla Firefox
Arch Linux
Ubuntu

Update to version 55.0.

• Exploit #1290 - Mozilla Firefox < 55 - Denial of Service (March 18, 2020)

• https://www.mozilla.org/en-US/security/advisories/mfsa2017-18/

• Multiple vulnerabilities in Mozilla Firefox
• Arch Linux update for firefox
• Ubuntu update for Firefox
• Ubuntu update for Ubufox
• Ubuntu update for Firefox