CVE-2017-7836

Description

The "pingsender" executable used by the Firefox Health Report dynamically loads a system copy of libcurl, which an attacker could replace. This allows for privilege escalation as the replaced libcurl code will run with Firefox's privileges. Note: This attack requires an attacker have local system access and only affects OS X and Linux. Windows systems are not affected. This vulnerability affects Firefox < 57.

Weakness classification

• CWE-427: Uncontrolled Search Path Element

Primary references

• security@mozilla.org — Third Party Advisory, VDB Entry
• security@mozilla.org — Third Party Advisory, VDB Entry
• security@mozilla.org — Issue Tracking, Permissions Required
• security@mozilla.org — Vendor Advisory
• af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry
• af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry
• af854a3a-2127-422b-91ae-364da2661108 — Issue Tracking, Permissions Required
• af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory