Medium severity5.5NVD Advisory· Published Jun 11, 2018· Updated Jun 17, 2026
CVE-2017-7767
CVE-2017-7767
Description
The Mozilla Maintenance Service can be invoked by an unprivileged user to overwrite arbitrary files with junk data using the Mozilla Windows Updater, which runs with the Maintenance Service's privileged access. Note: This attack requires local system access and only affects Windows. Other operating systems are not affected. This vulnerability affects Firefox ESR < 52.2 and Firefox < 54.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2unspecified+ 1 more
- (no CPE)range: unspecified
- (no CPE)range: unspecified
Patches
Vulnerability mechanics
References
5- www.securityfocus.com/bid/99057nvdThird Party AdvisoryVDB Entry
- www.securitytracker.com/id/1038689nvdThird Party AdvisoryVDB Entry
- bugzilla.mozilla.org/show_bug.cginvdIssue TrackingVendor Advisory
- www.mozilla.org/security/advisories/mfsa2017-15/nvdVendor Advisory
- www.mozilla.org/security/advisories/mfsa2017-16/nvdVendor Advisory
News mentions
0No linked articles in our index yet.