High severity7.8NVD Advisory· Published Jun 11, 2018· Updated Jun 17, 2026

CVE-2017-7755

Description

The Firefox installer on Windows can be made to load malicious DLL files stored in the same directory as the installer when it is run. This allows privileged execution if the installer is run with elevated privileges. Note: This attack only affects Windows operating systems. Other operating systems are unaffected. This vulnerability affects Firefox < 54, Firefox ESR < 52.2, and Thunderbird < 52.2.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

osv-coords46 versions
pkg:rpm/suse/firefox-gcc5&distro=SUSE%20Linux%20Enterprise%20Point%20of%20Sale%2011%20SP3 pkg:rpm/suse/firefox-gcc5&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP3-LTSS pkg:rpm/suse/firefox-gcc5&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP3-TERADATA pkg:rpm/suse/firefox-gcc5&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4 pkg:rpm/suse/firefox-gcc5&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2011%20SP4 pkg:rpm/suse/firefox-libffi-gcc5&distro=SUSE%20Linux%20Enterprise%20Point%20of%20Sale%2011%20SP3 pkg:rpm/suse/firefox-libffi-gcc5&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP3-LTSS pkg:rpm/suse/firefox-libffi-gcc5&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP3-TERADATA pkg:rpm/suse/firefox-libffi-gcc5&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4 pkg:rpm/suse/firefox-libffi-gcc5&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2011%20SP4 pkg:rpm/suse/MozillaFirefox-branding-SLED&distro=SUSE%20Linux%20Enterprise%20Point%20of%20Sale%2011%20SP3 pkg:rpm/suse/MozillaFirefox-branding-SLED&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP3-LTSS pkg:rpm/suse/MozillaFirefox-branding-SLED&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP3-TERADATA pkg:rpm/suse/MozillaFirefox-branding-SLED&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4 pkg:rpm/suse/MozillaFirefox-branding-SLED&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2011%20SP4 pkg:rpm/suse/MozillaFirefox-branding-SLE&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP2 pkg:rpm/suse/MozillaFirefox-branding-SLE&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP1-LTSS pkg:rpm/suse/MozillaFirefox-branding-SLE&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2 pkg:rpm/suse/MozillaFirefox-branding-SLE&distro=SUSE%20Linux%20Enterprise%20Server%2012-LTSS pkg:rpm/suse/MozillaFirefox-branding-SLE&distro=SUSE%20Linux%20Enterprise%20Server%20for%20Raspberry%20Pi%2012%20SP2 pkg:rpm/suse/MozillaFirefox-branding-SLE&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012 pkg:rpm/suse/MozillaFirefox-branding-SLE&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP1 pkg:rpm/suse/MozillaFirefox-branding-SLE&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP2 pkg:rpm/suse/MozillaFirefox-branding-SLE&distro=SUSE%20OpenStack%20Cloud%206 pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP2 pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Point%20of%20Sale%2011%20SP3 pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP3-LTSS pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP3-TERADATA pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4 pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP1-LTSS pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2 pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%2012-LTSS pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%20for%20Raspberry%20Pi%2012%20SP2 pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2011%20SP4 pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012 pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP1 pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP2 pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2011%20SP4 pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP2 pkg:rpm/suse/MozillaFirefox&distro=SUSE%20OpenStack%20Cloud%206 pkg:rpm/suse/mozilla-nss&distro=SUSE%20Linux%20Enterprise%20Point%20of%20Sale%2011%20SP3 pkg:rpm/suse/mozilla-nss&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP3-LTSS pkg:rpm/suse/mozilla-nss&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP3-TERADATA pkg:rpm/suse/mozilla-nss&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4 pkg:rpm/suse/mozilla-nss&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2011%20SP4 pkg:rpm/suse/mozilla-nss&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2011%20SP4
< 5.3.1+r233831-7.1+ 45 more
- (no CPE)range: < 5.3.1+r233831-7.1
- (no CPE)range: < 5.3.1+r233831-7.1
- (no CPE)range: < 5.3.1+r233831-7.1
- (no CPE)range: < 5.3.1+r233831-7.1
- (no CPE)range: < 5.3.1+r233831-7.1
- (no CPE)range: < 5.3.1+r233831-7.1
- (no CPE)range: < 5.3.1+r233831-7.1
- (no CPE)range: < 5.3.1+r233831-7.1
- (no CPE)range: < 5.3.1+r233831-7.1
- (no CPE)range: < 5.3.1+r233831-7.1
- (no CPE)range: < 52-24.3.44
- (no CPE)range: < 52-24.3.44
- (no CPE)range: < 52-24.3.44
- (no CPE)range: < 52-24.3.44
- (no CPE)range: < 52-24.3.44
- (no CPE)range: < 52-31.1
- (no CPE)range: < 52-31.1
- (no CPE)range: < 52-31.1
- (no CPE)range: < 52-31.1
- (no CPE)range: < 52-31.1
- (no CPE)range: < 52-31.1
- (no CPE)range: < 52-31.1
- (no CPE)range: < 52-31.1
- (no CPE)range: < 52-31.1
- (no CPE)range: < 52.2.0esr-108.3
- (no CPE)range: < 52.2.0esr-72.5.2
- (no CPE)range: < 52.2.0esr-72.5.2
- (no CPE)range: < 52.2.0esr-72.5.2
- (no CPE)range: < 52.2.0esr-72.5.2
- (no CPE)range: < 52.2.0esr-108.3
- (no CPE)range: < 52.2.0esr-108.3
- (no CPE)range: < 52.2.0esr-108.3
- (no CPE)range: < 52.2.0esr-108.3
- (no CPE)range: < 52.2.0esr-72.5.2
- (no CPE)range: < 52.2.0esr-108.3
- (no CPE)range: < 52.2.0esr-108.3
- (no CPE)range: < 52.2.0esr-108.3
- (no CPE)range: < 52.2.0esr-72.5.2
- (no CPE)range: < 52.2.0esr-108.3
- (no CPE)range: < 52.2.0esr-108.3
- (no CPE)range: < 3.29.5-47.3.2
- (no CPE)range: < 3.29.5-47.3.2
- (no CPE)range: < 3.29.5-47.3.2
- (no CPE)range: < 3.29.5-47.3.2
- (no CPE)range: < 3.29.5-47.3.2
- (no CPE)range: < 3.29.5-47.3.2
Mozilla Corporation/Firefoxv52 versions
unspecified+ 1 more
- (no CPE)range: unspecified
- (no CPE)range: unspecified
Mozilla Corporation/Thunderbirdv5
Range: unspecified

Patches

Vulnerability mechanics

References

www.securityfocus.com/bid/99057nvdThird Party AdvisoryVDB Entry
www.securitytracker.com/id/1038689nvdThird Party AdvisoryVDB Entry
bugzilla.mozilla.org/show_bug.cginvdIssue TrackingVendor Advisory
www.mozilla.org/security/advisories/mfsa2017-15/nvdVendor Advisory
www.mozilla.org/security/advisories/mfsa2017-16/nvdVendor Advisory
www.mozilla.org/security/advisories/mfsa2017-17/nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.507
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000