Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

Buy Us a Coffee

CVE-2017-7805

Quick assessment

Affected

Mozilla Firefox

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Mozilla Firefox、Firefox ESR和Thunderbird都是由美国Mozilla基金会开发的产品。Firefox是一款开源Web浏览器，Firefox ESR是Firefox的一个延长支持版本。Thunderbird是从Mozilla Application Suite中独立出来的一套电子邮件客户端软件。 Mozilla Thunderbird 52.4之前的版本、Firefox ESR 52.4之前的版本和Firefox 56之前的版本中存在安全漏洞。远程攻击者可利用该漏洞造成拒绝

AI Predicted 8.1 Difficulty: Easy EPSS 2.99% · P86 Updated Feb 21, 2026

Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2017-7805

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

N/A

Source: CVE Program / CVE List V5

Vulnerability Description

During TLS 1.2 exchanges, handshake hashes are generated which point to a message buffer. This saved data is used for later messages but in some cases, the handshake transcript can exceed the space available in the current buffer, causing the allocation of a new buffer. This leaves a pointer pointing to the old, freed buffer, resulting in a use-after-free when handshake hashes are then calculated afterwards. This can result in a potentially exploitable crash. This vulnerability affects Firefox < 56, Firefox ESR < 52.4, and Thunderbird < 52.4.

Source: CVE Program / CVE List V5

CVSS Information

N/A

Source: CVE Program / CVE List V5

Vulnerability Type

N/A

Source: CVE Program / CVE List V5

Vulnerability Title

Mozilla Firefox、Firefox ESR和Thunderbird 安全漏洞

Source: CNNVD (China National Vulnerability Database)

Vulnerability Description

Source: CNNVD (China National Vulnerability Database)

CVSS Information

N/A

Source: CNNVD (China National Vulnerability Database)

Vulnerability Type

N/A

Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor	Product	Affected Versions	CPE
Mozilla	Firefox	unspecified ~ 56	-
Mozilla	Firefox ESR	unspecified ~ 52.4	-
Mozilla	Thunderbird	unspecified ~ 52.4	-

II. Public POCs for CVE-2017-7805

#	POC Description	Source Link	Shenlong Link

AI-Generated POC Premium

No public POC found.

III. Intelligence Information for CVE-2017-7805

请登录查看更多情报信息。

Vendor Advisories for CVE-2017-7805 (12)

https://www.mozilla.org/security/advisories/mfsa2017-21/ x_refsource_CONFIRM
https://bugzilla.mozilla.org/show_bug.cgi?id=1377618 x_refsource_CONFIRM
https://www.mozilla.org/security/advisories/mfsa2017-22/ x_refsource_CONFIRM
http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html x_refsource_CONFIRM
https://www.mozilla.org/security/advisories/mfsa2017-23/ x_refsource_CONFIRM
http://www.securityfocus.com/bid/101059 vdb-entry x_refsource_BID
http://www.securitytracker.com/id/1039465 vdb-entry x_refsource_SECTRACK
https://www.debian.org/security/2017/dsa-3998 vendor-advisory x_refsource_DEBIAN
https://www.debian.org/security/2017/dsa-4014 vendor-advisory x_refsource_DEBIAN
https://www.debian.org/security/2017/dsa-3987 vendor-advisory x_refsource_DEBIAN
https://security.gentoo.org/glsa/201803-14 vendor-advisory x_refsource_GENTOO
https://access.redhat.com/errata/RHSA-2017:2832 vendor-advisory x_refsource_REDHAT

Mailing List Discussions for CVE-2017-7805 (1)

https://lists.debian.org/debian-lts-announce/2017/11/msg00000.html mailing-list x_refsource_MLIST

https://www.cve.org/CVERecord?id=CVE-2017-7805

Same Patch Batch · Mozilla · 2018-06-11 · 315 CVEs total

CVE-2017-7829		Mozilla Thunderbird 安全漏洞
CVE-2017-7838		Mozilla Firefox 安全漏洞
CVE-2017-7837		Mozilla Firefox 安全漏洞
CVE-2017-7836		Mozilla Firefox 安全漏洞
CVE-2017-7835		Mozilla Firefox 安全漏洞
CVE-2017-7834		Mozilla Firefox 安全漏洞
CVE-2017-7833		Mozilla Firefox 安全漏洞
CVE-2017-7832		Mozilla Firefox 安全漏洞
CVE-2017-7831		Mozilla Firefox 安全漏洞
CVE-2017-7830		Mozilla Firefox、Firefox ESR和Thunderbird 安全漏洞
CVE-2017-7824		Mozilla Firefox、Firefox ESR和Thunderbird 缓冲区错误漏洞
CVE-2017-7820		Mozilla Firefox 安全漏洞
CVE-2017-7821		Mozilla Firefox 安全漏洞
CVE-2017-7822		Mozilla Firefox 安全漏洞
CVE-2017-7823		Mozilla Firefox、Firefox ESR和Thunderbird 安全漏洞
CVE-2017-7826		Mozilla Firefox、Firefox ESR和Thunderbird 安全漏洞
CVE-2017-7828		Mozilla Firefox、Firefox ESR和Thunderbird 安全漏洞
CVE-2017-7827		Mozilla Firefox 安全漏洞
CVE-2017-7839		Mozilla Firefox 安全漏洞
CVE-2017-7825		Mozilla Firefox、Firefox ESR和Thunderbird for OS X 安全漏洞

Showing top 20 of 315 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: Firefox

Same vendor: Mozilla

V. Comments for CVE-2017-7805

No comments yet

Goal Reached Thanks to every supporter — we hit 100%!

CVE-2017-7805

Quick assessment

I. Basic Information for CVE-2017-7805

Vulnerability Information

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Affected Products

II. Public POCs for CVE-2017-7805

III. Intelligence Information for CVE-2017-7805

Vendor Advisories for CVE-2017-7805 (12)

Mailing List Discussions for CVE-2017-7805 (1)

Same Patch Batch · Mozilla · 2018-06-11 · 315 CVEs total

IV. Related Vulnerabilities

V. Comments for CVE-2017-7805

Leave a comment