← Retour aux CVEs

CVE-2017-7794

N/A

Description

On Linux systems, if the content process is compromised, the sandbox broker will allow files to be truncated even though the sandbox explicitly only has read access to the local file system and no write permissions. Note: This attack only affects the Linux operating system. Other operating systems are not affected. This vulnerability affects Firefox < 55.

Details CVE

Score CVSS v3.1N/A

Publie6/11/2018

Derniere modification11/21/2024

Sourcenvd

Observations honeypot0

Produits affectes

linux:linux_kernelmozilla:firefox

Faiblesses (CWE)

CWE-276

References

http://www.securitytracker.com/id/1039124(security@mozilla.org)

https://bugzilla.mozilla.org/show_bug.cgi?id=1374281(security@mozilla.org)

https://www.mozilla.org/security/advisories/mfsa2017-18/(security@mozilla.org)

http://www.securitytracker.com/id/1039124(af854a3a-2127-422b-91ae-364da2661108)

https://bugzilla.mozilla.org/show_bug.cgi?id=1374281(af854a3a-2127-422b-91ae-364da2661108)

https://www.mozilla.org/security/advisories/mfsa2017-18/(af854a3a-2127-422b-91ae-364da2661108)

Correlations IOC

Aucune correlation enregistree

This product uses data from the NVD API but is not endorsed or certified by the NVD.