Skip to content
Not rated

CVE-2017-7782 An error in the "WindowsDllDetourPatcher" where a RWX ("Read/Write/Execute") 4k block is allocated but never…

Description

An error in the "WindowsDllDetourPatcher" where a RWX ("Read/Write/Execute") 4k block is allocated but never protected, violating DEP protections. Note: This attack only affects Windows operating systems. Other operating systems are not affected. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55.

Affected products and versions

Product Affected versions Fixed in
Thunderbird 52.3 earliest → < 52.3 52.3
Firefox ESR 52.3 earliest → < 52.3 52.3
Firefox 55 earliest → < 55 55

References

Timeline

  1. Published
  2. Last modified
The 1713 CVEs of Thunderbird →
Track this CVE