csaf_suse - suse-su-2017:2302-1

suse-su-2017:2302-1

Vulnerability from csaf_suse

Published

2017-08-30 13:31

Modified

2017-08-30 13:31

Summary

Security update for MozillaFirefox

Notes

Title of the patch

Security update for MozillaFirefox

Description of the patch

Mozilla Firefox was updated to the ESR 52.3 release (bsc#1052829) Following security issues were fixed: * MFSA 2017-19/CVE-2017-7807: Domain hijacking through AppCache fallback * MFSA 2017-19/CVE-2017-7791: Spoofing following page navigation with data: protocol and modal alerts * MFSA 2017-19/CVE-2017-7792: Buffer overflow viewing certificates with an extremely long OID * MFSA 2017-19/CVE-2017-7782: WindowsDllDetourPatcher allocates memory without DEP protections * MFSA 2017-19/CVE-2017-7787: Same-origin policy bypass with iframes through page reloads * MFSA 2017-19/CVE-2017-7786: Buffer overflow while painting non-displayable SVG * MFSA 2017-19/CVE-2017-7785: Buffer overflow manipulating ARIA attributes in DOM * MFSA 2017-19/CVE-2017-7784: Use-after-free with image observers * MFSA 2017-19/CVE-2017-7753: Out-of-bounds read with cached style data and pseudo-elements * MFSA 2017-19/CVE-2017-7798: XUL injection in the style editor in devtools * MFSA 2017-19/CVE-2017-7804: Memory protection bypass through WindowsDllDetourPatcher * MFSA 2017-19/CVE-2017-7779: Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3 * MFSA 2017-19/CVE-2017-7800: Use-after-free in WebSockets during disconnection * MFSA 2017-19/CVE-2017-7801: Use-after-free with marquee during window resizing * MFSA 2017-19/CVE-2017-7802: Use-after-free resizing image elements * MFSA 2017-19/CVE-2017-7803: CSP containing 'sandbox' improperly applied This update also fixes: - fixed firefox hangs after a while in FUTEX_WAIT_PRIVATE if cgroups enabled and running on cpu >=1 (bsc#1031485) - The Itanium ia64 build was fixed.

Patchnames

sdksp4-MozillaFirefox-13254,sleposp3-MozillaFirefox-13254,slessp3-MozillaFirefox-13254,slessp4-MozillaFirefox-13254

CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for MozillaFirefox",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "\n\nMozilla Firefox was updated to the ESR 52.3 release (bsc#1052829)\n\nFollowing security issues were fixed:\n\n* MFSA 2017-19/CVE-2017-7807: Domain hijacking through AppCache fallback\n* MFSA 2017-19/CVE-2017-7791: Spoofing following page navigation with data: protocol and modal alerts\n* MFSA 2017-19/CVE-2017-7792: Buffer overflow viewing certificates with an extremely long OID\n* MFSA 2017-19/CVE-2017-7782: WindowsDllDetourPatcher allocates memory without DEP protections\n* MFSA 2017-19/CVE-2017-7787: Same-origin policy bypass with iframes through page reloads\n* MFSA 2017-19/CVE-2017-7786: Buffer overflow while painting non-displayable SVG\n* MFSA 2017-19/CVE-2017-7785: Buffer overflow manipulating ARIA attributes in DOM\n* MFSA 2017-19/CVE-2017-7784: Use-after-free with image observers\n* MFSA 2017-19/CVE-2017-7753: Out-of-bounds read with cached style data and pseudo-elements\n* MFSA 2017-19/CVE-2017-7798: XUL injection in the style editor in devtools\n* MFSA 2017-19/CVE-2017-7804: Memory protection bypass through WindowsDllDetourPatcher\n* MFSA 2017-19/CVE-2017-7779: Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3\n* MFSA 2017-19/CVE-2017-7800: Use-after-free in WebSockets during disconnection\n* MFSA 2017-19/CVE-2017-7801: Use-after-free with marquee during window resizing\n* MFSA 2017-19/CVE-2017-7802: Use-after-free resizing image elements\n* MFSA 2017-19/CVE-2017-7803: CSP containing \u0027sandbox\u0027 improperly applied\n\nThis update also fixes:\n\n-  fixed firefox hangs after a while in FUTEX_WAIT_PRIVATE if\n   cgroups enabled and running on cpu \u003e=1 (bsc#1031485)\n-  The Itanium ia64 build was fixed.\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "sdksp4-MozillaFirefox-13254,sleposp3-MozillaFirefox-13254,slessp3-MozillaFirefox-13254,slessp4-MozillaFirefox-13254",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2017_2302-1.json"
      },
      {
        "category": "self",
        "summary": "URL for SUSE-SU-2017:2302-1",
        "url": "https://www.suse.com/support/update/announcement/2017/suse-su-20172302-1/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for SUSE-SU-2017:2302-1",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2017-August/003171.html"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1031485",
        "url": "https://bugzilla.suse.com/1031485"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1052829",
        "url": "https://bugzilla.suse.com/1052829"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-7753 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-7753/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-7779 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-7779/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-7782 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-7782/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-7784 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-7784/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-7785 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-7785/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-7786 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-7786/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-7787 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-7787/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-7791 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-7791/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-7792 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-7792/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-7798 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-7798/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-7800 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-7800/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-7801 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-7801/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-7802 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-7802/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-7803 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-7803/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-7804 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-7804/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-7807 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-7807/"
      }
    ],
    "title": "Security update for MozillaFirefox",
    "tracking": {
      "current_release_date": "2017-08-30T13:31:52Z",
      "generator": {
        "date": "2017-08-30T13:31:52Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "SUSE-SU-2017:2302-1",
      "initial_release_date": "2017-08-30T13:31:52Z",
      "revision_history": [
        {
          "date": "2017-08-30T13:31:52Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "MozillaFirefox-devel-52.3.0esr-72.9.1.i586",
                "product": {
                  "name": "MozillaFirefox-devel-52.3.0esr-72.9.1.i586",
                  "product_id": "MozillaFirefox-devel-52.3.0esr-72.9.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "MozillaFirefox-52.3.0esr-72.9.1.i586",
                "product": {
                  "name": "MozillaFirefox-52.3.0esr-72.9.1.i586",
                  "product_id": "MozillaFirefox-52.3.0esr-72.9.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "MozillaFirefox-branding-SLED-52-24.5.1.i586",
                "product": {
                  "name": "MozillaFirefox-branding-SLED-52-24.5.1.i586",
                  "product_id": "MozillaFirefox-branding-SLED-52-24.5.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
                "product": {
                  "name": "MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
                  "product_id": "MozillaFirefox-translations-52.3.0esr-72.9.1.i586"
                }
              }
            ],
            "category": "architecture",
            "name": "i586"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "MozillaFirefox-devel-52.3.0esr-72.9.1.ia64",
                "product": {
                  "name": "MozillaFirefox-devel-52.3.0esr-72.9.1.ia64",
                  "product_id": "MozillaFirefox-devel-52.3.0esr-72.9.1.ia64"
                }
              },
              {
                "category": "product_version",
                "name": "MozillaFirefox-52.3.0esr-72.9.1.ia64",
                "product": {
                  "name": "MozillaFirefox-52.3.0esr-72.9.1.ia64",
                  "product_id": "MozillaFirefox-52.3.0esr-72.9.1.ia64"
                }
              },
              {
                "category": "product_version",
                "name": "MozillaFirefox-branding-SLED-52-24.5.1.ia64",
                "product": {
                  "name": "MozillaFirefox-branding-SLED-52-24.5.1.ia64",
                  "product_id": "MozillaFirefox-branding-SLED-52-24.5.1.ia64"
                }
              },
              {
                "category": "product_version",
                "name": "MozillaFirefox-translations-52.3.0esr-72.9.1.ia64",
                "product": {
                  "name": "MozillaFirefox-translations-52.3.0esr-72.9.1.ia64",
                  "product_id": "MozillaFirefox-translations-52.3.0esr-72.9.1.ia64"
                }
              }
            ],
            "category": "architecture",
            "name": "ia64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "MozillaFirefox-devel-52.3.0esr-72.9.1.ppc64",
                "product": {
                  "name": "MozillaFirefox-devel-52.3.0esr-72.9.1.ppc64",
                  "product_id": "MozillaFirefox-devel-52.3.0esr-72.9.1.ppc64"
                }
              },
              {
                "category": "product_version",
                "name": "MozillaFirefox-52.3.0esr-72.9.1.ppc64",
                "product": {
                  "name": "MozillaFirefox-52.3.0esr-72.9.1.ppc64",
                  "product_id": "MozillaFirefox-52.3.0esr-72.9.1.ppc64"
                }
              },
              {
                "category": "product_version",
                "name": "MozillaFirefox-branding-SLED-52-24.5.1.ppc64",
                "product": {
                  "name": "MozillaFirefox-branding-SLED-52-24.5.1.ppc64",
                  "product_id": "MozillaFirefox-branding-SLED-52-24.5.1.ppc64"
                }
              },
              {
                "category": "product_version",
                "name": "MozillaFirefox-translations-52.3.0esr-72.9.1.ppc64",
                "product": {
                  "name": "MozillaFirefox-translations-52.3.0esr-72.9.1.ppc64",
                  "product_id": "MozillaFirefox-translations-52.3.0esr-72.9.1.ppc64"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "MozillaFirefox-devel-52.3.0esr-72.9.1.s390x",
                "product": {
                  "name": "MozillaFirefox-devel-52.3.0esr-72.9.1.s390x",
                  "product_id": "MozillaFirefox-devel-52.3.0esr-72.9.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "MozillaFirefox-52.3.0esr-72.9.1.s390x",
                "product": {
                  "name": "MozillaFirefox-52.3.0esr-72.9.1.s390x",
                  "product_id": "MozillaFirefox-52.3.0esr-72.9.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "MozillaFirefox-branding-SLED-52-24.5.1.s390x",
                "product": {
                  "name": "MozillaFirefox-branding-SLED-52-24.5.1.s390x",
                  "product_id": "MozillaFirefox-branding-SLED-52-24.5.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
                "product": {
                  "name": "MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
                  "product_id": "MozillaFirefox-translations-52.3.0esr-72.9.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "MozillaFirefox-devel-52.3.0esr-72.9.1.x86_64",
                "product": {
                  "name": "MozillaFirefox-devel-52.3.0esr-72.9.1.x86_64",
                  "product_id": "MozillaFirefox-devel-52.3.0esr-72.9.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "MozillaFirefox-52.3.0esr-72.9.1.x86_64",
                "product": {
                  "name": "MozillaFirefox-52.3.0esr-72.9.1.x86_64",
                  "product_id": "MozillaFirefox-52.3.0esr-72.9.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
                "product": {
                  "name": "MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
                  "product_id": "MozillaFirefox-branding-SLED-52-24.5.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
                "product": {
                  "name": "MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
                  "product_id": "MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Software Development Kit 11 SP4",
                "product": {
                  "name": "SUSE Linux Enterprise Software Development Kit 11 SP4",
                  "product_id": "SUSE Linux Enterprise Software Development Kit 11 SP4",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:suse:sle-sdk:11:sp4"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Point of Sale 11 SP3",
                "product": {
                  "name": "SUSE Linux Enterprise Point of Sale 11 SP3",
                  "product_id": "SUSE Linux Enterprise Point of Sale 11 SP3",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sle-pos:11:sp3"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server 11 SP3-LTSS",
                "product": {
                  "name": "SUSE Linux Enterprise Server 11 SP3-LTSS",
                  "product_id": "SUSE Linux Enterprise Server 11 SP3-LTSS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:suse_sles_ltss:11:sp3"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server 11 SP3-TERADATA",
                "product": {
                  "name": "SUSE Linux Enterprise Server 11 SP3-TERADATA",
                  "product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles:11:sp3:teradata"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server 11 SP4",
                "product": {
                  "name": "SUSE Linux Enterprise Server 11 SP4",
                  "product_id": "SUSE Linux Enterprise Server 11 SP4",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:suse_sles:11:sp4"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server for SAP Applications 11 SP4",
                "product": {
                  "name": "SUSE Linux Enterprise Server for SAP Applications 11 SP4",
                  "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles_sap:11:sp4"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-devel-52.3.0esr-72.9.1.i586 as component of SUSE Linux Enterprise Software Development Kit 11 SP4",
          "product_id": "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.i586"
        },
        "product_reference": "MozillaFirefox-devel-52.3.0esr-72.9.1.i586",
        "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-devel-52.3.0esr-72.9.1.ia64 as component of SUSE Linux Enterprise Software Development Kit 11 SP4",
          "product_id": "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.ia64"
        },
        "product_reference": "MozillaFirefox-devel-52.3.0esr-72.9.1.ia64",
        "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-devel-52.3.0esr-72.9.1.ppc64 as component of SUSE Linux Enterprise Software Development Kit 11 SP4",
          "product_id": "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.ppc64"
        },
        "product_reference": "MozillaFirefox-devel-52.3.0esr-72.9.1.ppc64",
        "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-devel-52.3.0esr-72.9.1.s390x as component of SUSE Linux Enterprise Software Development Kit 11 SP4",
          "product_id": "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.s390x"
        },
        "product_reference": "MozillaFirefox-devel-52.3.0esr-72.9.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-devel-52.3.0esr-72.9.1.x86_64 as component of SUSE Linux Enterprise Software Development Kit 11 SP4",
          "product_id": "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.x86_64"
        },
        "product_reference": "MozillaFirefox-devel-52.3.0esr-72.9.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-52.3.0esr-72.9.1.i586 as component of SUSE Linux Enterprise Point of Sale 11 SP3",
          "product_id": "SUSE Linux Enterprise Point of Sale 11 SP3:MozillaFirefox-52.3.0esr-72.9.1.i586"
        },
        "product_reference": "MozillaFirefox-52.3.0esr-72.9.1.i586",
        "relates_to_product_reference": "SUSE Linux Enterprise Point of Sale 11 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-branding-SLED-52-24.5.1.i586 as component of SUSE Linux Enterprise Point of Sale 11 SP3",
          "product_id": "SUSE Linux Enterprise Point of Sale 11 SP3:MozillaFirefox-branding-SLED-52-24.5.1.i586"
        },
        "product_reference": "MozillaFirefox-branding-SLED-52-24.5.1.i586",
        "relates_to_product_reference": "SUSE Linux Enterprise Point of Sale 11 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-translations-52.3.0esr-72.9.1.i586 as component of SUSE Linux Enterprise Point of Sale 11 SP3",
          "product_id": "SUSE Linux Enterprise Point of Sale 11 SP3:MozillaFirefox-translations-52.3.0esr-72.9.1.i586"
        },
        "product_reference": "MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
        "relates_to_product_reference": "SUSE Linux Enterprise Point of Sale 11 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-52.3.0esr-72.9.1.i586 as component of SUSE Linux Enterprise Server 11 SP3-LTSS",
          "product_id": "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-52.3.0esr-72.9.1.i586"
        },
        "product_reference": "MozillaFirefox-52.3.0esr-72.9.1.i586",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-52.3.0esr-72.9.1.s390x as component of SUSE Linux Enterprise Server 11 SP3-LTSS",
          "product_id": "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-52.3.0esr-72.9.1.s390x"
        },
        "product_reference": "MozillaFirefox-52.3.0esr-72.9.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-52.3.0esr-72.9.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP3-LTSS",
          "product_id": "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-52.3.0esr-72.9.1.x86_64"
        },
        "product_reference": "MozillaFirefox-52.3.0esr-72.9.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-branding-SLED-52-24.5.1.i586 as component of SUSE Linux Enterprise Server 11 SP3-LTSS",
          "product_id": "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-branding-SLED-52-24.5.1.i586"
        },
        "product_reference": "MozillaFirefox-branding-SLED-52-24.5.1.i586",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-branding-SLED-52-24.5.1.s390x as component of SUSE Linux Enterprise Server 11 SP3-LTSS",
          "product_id": "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-branding-SLED-52-24.5.1.s390x"
        },
        "product_reference": "MozillaFirefox-branding-SLED-52-24.5.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-branding-SLED-52-24.5.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP3-LTSS",
          "product_id": "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-branding-SLED-52-24.5.1.x86_64"
        },
        "product_reference": "MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-translations-52.3.0esr-72.9.1.i586 as component of SUSE Linux Enterprise Server 11 SP3-LTSS",
          "product_id": "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-translations-52.3.0esr-72.9.1.i586"
        },
        "product_reference": "MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-translations-52.3.0esr-72.9.1.s390x as component of SUSE Linux Enterprise Server 11 SP3-LTSS",
          "product_id": "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x"
        },
        "product_reference": "MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP3-LTSS",
          "product_id": "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64"
        },
        "product_reference": "MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-52.3.0esr-72.9.1.i586 as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
          "product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-52.3.0esr-72.9.1.i586"
        },
        "product_reference": "MozillaFirefox-52.3.0esr-72.9.1.i586",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-52.3.0esr-72.9.1.s390x as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
          "product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-52.3.0esr-72.9.1.s390x"
        },
        "product_reference": "MozillaFirefox-52.3.0esr-72.9.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-52.3.0esr-72.9.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
          "product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-52.3.0esr-72.9.1.x86_64"
        },
        "product_reference": "MozillaFirefox-52.3.0esr-72.9.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-branding-SLED-52-24.5.1.i586 as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
          "product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-branding-SLED-52-24.5.1.i586"
        },
        "product_reference": "MozillaFirefox-branding-SLED-52-24.5.1.i586",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-branding-SLED-52-24.5.1.s390x as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
          "product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-branding-SLED-52-24.5.1.s390x"
        },
        "product_reference": "MozillaFirefox-branding-SLED-52-24.5.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-branding-SLED-52-24.5.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
          "product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-branding-SLED-52-24.5.1.x86_64"
        },
        "product_reference": "MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-translations-52.3.0esr-72.9.1.i586 as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
          "product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-translations-52.3.0esr-72.9.1.i586"
        },
        "product_reference": "MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-translations-52.3.0esr-72.9.1.s390x as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
          "product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x"
        },
        "product_reference": "MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
          "product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64"
        },
        "product_reference": "MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-52.3.0esr-72.9.1.i586 as component of SUSE Linux Enterprise Server 11 SP4",
          "product_id": "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.i586"
        },
        "product_reference": "MozillaFirefox-52.3.0esr-72.9.1.i586",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-52.3.0esr-72.9.1.ia64 as component of SUSE Linux Enterprise Server 11 SP4",
          "product_id": "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ia64"
        },
        "product_reference": "MozillaFirefox-52.3.0esr-72.9.1.ia64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-52.3.0esr-72.9.1.ppc64 as component of SUSE Linux Enterprise Server 11 SP4",
          "product_id": "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ppc64"
        },
        "product_reference": "MozillaFirefox-52.3.0esr-72.9.1.ppc64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-52.3.0esr-72.9.1.s390x as component of SUSE Linux Enterprise Server 11 SP4",
          "product_id": "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.s390x"
        },
        "product_reference": "MozillaFirefox-52.3.0esr-72.9.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-52.3.0esr-72.9.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP4",
          "product_id": "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.x86_64"
        },
        "product_reference": "MozillaFirefox-52.3.0esr-72.9.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-branding-SLED-52-24.5.1.i586 as component of SUSE Linux Enterprise Server 11 SP4",
          "product_id": "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.i586"
        },
        "product_reference": "MozillaFirefox-branding-SLED-52-24.5.1.i586",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-branding-SLED-52-24.5.1.ia64 as component of SUSE Linux Enterprise Server 11 SP4",
          "product_id": "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ia64"
        },
        "product_reference": "MozillaFirefox-branding-SLED-52-24.5.1.ia64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-branding-SLED-52-24.5.1.ppc64 as component of SUSE Linux Enterprise Server 11 SP4",
          "product_id": "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ppc64"
        },
        "product_reference": "MozillaFirefox-branding-SLED-52-24.5.1.ppc64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-branding-SLED-52-24.5.1.s390x as component of SUSE Linux Enterprise Server 11 SP4",
          "product_id": "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.s390x"
        },
        "product_reference": "MozillaFirefox-branding-SLED-52-24.5.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-branding-SLED-52-24.5.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP4",
          "product_id": "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.x86_64"
        },
        "product_reference": "MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-translations-52.3.0esr-72.9.1.i586 as component of SUSE Linux Enterprise Server 11 SP4",
          "product_id": "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.i586"
        },
        "product_reference": "MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-translations-52.3.0esr-72.9.1.ia64 as component of SUSE Linux Enterprise Server 11 SP4",
          "product_id": "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ia64"
        },
        "product_reference": "MozillaFirefox-translations-52.3.0esr-72.9.1.ia64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-translations-52.3.0esr-72.9.1.ppc64 as component of SUSE Linux Enterprise Server 11 SP4",
          "product_id": "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ppc64"
        },
        "product_reference": "MozillaFirefox-translations-52.3.0esr-72.9.1.ppc64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-translations-52.3.0esr-72.9.1.s390x as component of SUSE Linux Enterprise Server 11 SP4",
          "product_id": "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x"
        },
        "product_reference": "MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP4",
          "product_id": "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64"
        },
        "product_reference": "MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-52.3.0esr-72.9.1.i586 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.i586"
        },
        "product_reference": "MozillaFirefox-52.3.0esr-72.9.1.i586",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-52.3.0esr-72.9.1.ia64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ia64"
        },
        "product_reference": "MozillaFirefox-52.3.0esr-72.9.1.ia64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-52.3.0esr-72.9.1.ppc64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ppc64"
        },
        "product_reference": "MozillaFirefox-52.3.0esr-72.9.1.ppc64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-52.3.0esr-72.9.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.s390x"
        },
        "product_reference": "MozillaFirefox-52.3.0esr-72.9.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-52.3.0esr-72.9.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.x86_64"
        },
        "product_reference": "MozillaFirefox-52.3.0esr-72.9.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-branding-SLED-52-24.5.1.i586 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.i586"
        },
        "product_reference": "MozillaFirefox-branding-SLED-52-24.5.1.i586",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-branding-SLED-52-24.5.1.ia64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ia64"
        },
        "product_reference": "MozillaFirefox-branding-SLED-52-24.5.1.ia64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-branding-SLED-52-24.5.1.ppc64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ppc64"
        },
        "product_reference": "MozillaFirefox-branding-SLED-52-24.5.1.ppc64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-branding-SLED-52-24.5.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.s390x"
        },
        "product_reference": "MozillaFirefox-branding-SLED-52-24.5.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-branding-SLED-52-24.5.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.x86_64"
        },
        "product_reference": "MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-translations-52.3.0esr-72.9.1.i586 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.i586"
        },
        "product_reference": "MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-translations-52.3.0esr-72.9.1.ia64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ia64"
        },
        "product_reference": "MozillaFirefox-translations-52.3.0esr-72.9.1.ia64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-translations-52.3.0esr-72.9.1.ppc64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ppc64"
        },
        "product_reference": "MozillaFirefox-translations-52.3.0esr-72.9.1.ppc64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-translations-52.3.0esr-72.9.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x"
        },
        "product_reference": "MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64"
        },
        "product_reference": "MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2017-7753",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-7753"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "An out-of-bounds read occurs when applying style rules to pseudo-elements, such as ::first-line, using cached style data. This vulnerability affects Thunderbird \u003c 52.3, Firefox ESR \u003c 52.3, and Firefox \u003c 55.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Point of Sale 11 SP3:MozillaFirefox-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Point of Sale 11 SP3:MozillaFirefox-branding-SLED-52-24.5.1.i586",
          "SUSE Linux Enterprise Point of Sale 11 SP3:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-52.3.0esr-72.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-branding-SLED-52-24.5.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-52.3.0esr-72.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-branding-SLED-52-24.5.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.ia64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.ppc64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-7753",
          "url": "https://www.suse.com/security/cve/CVE-2017-7753"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1052829 for CVE-2017-7753",
          "url": "https://bugzilla.suse.com/1052829"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Point of Sale 11 SP3:MozillaFirefox-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Point of Sale 11 SP3:MozillaFirefox-branding-SLED-52-24.5.1.i586",
            "SUSE Linux Enterprise Point of Sale 11 SP3:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-branding-SLED-52-24.5.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-branding-SLED-52-24.5.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Point of Sale 11 SP3:MozillaFirefox-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Point of Sale 11 SP3:MozillaFirefox-branding-SLED-52-24.5.1.i586",
            "SUSE Linux Enterprise Point of Sale 11 SP3:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-branding-SLED-52-24.5.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-branding-SLED-52-24.5.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-08-30T13:31:52Z",
          "details": "important"
        }
      ],
      "title": "CVE-2017-7753"
    },
    {
      "cve": "CVE-2017-7779",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-7779"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Memory safety bugs were reported in Firefox 54, Firefox ESR 52.2, and Thunderbird 52.2. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Thunderbird \u003c 52.3, Firefox ESR \u003c 52.3, and Firefox \u003c 55.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Point of Sale 11 SP3:MozillaFirefox-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Point of Sale 11 SP3:MozillaFirefox-branding-SLED-52-24.5.1.i586",
          "SUSE Linux Enterprise Point of Sale 11 SP3:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-52.3.0esr-72.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-branding-SLED-52-24.5.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-52.3.0esr-72.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-branding-SLED-52-24.5.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.ia64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.ppc64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-7779",
          "url": "https://www.suse.com/security/cve/CVE-2017-7779"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1052829 for CVE-2017-7779",
          "url": "https://bugzilla.suse.com/1052829"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Point of Sale 11 SP3:MozillaFirefox-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Point of Sale 11 SP3:MozillaFirefox-branding-SLED-52-24.5.1.i586",
            "SUSE Linux Enterprise Point of Sale 11 SP3:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-branding-SLED-52-24.5.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-branding-SLED-52-24.5.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Point of Sale 11 SP3:MozillaFirefox-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Point of Sale 11 SP3:MozillaFirefox-branding-SLED-52-24.5.1.i586",
            "SUSE Linux Enterprise Point of Sale 11 SP3:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-branding-SLED-52-24.5.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-branding-SLED-52-24.5.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-08-30T13:31:52Z",
          "details": "important"
        }
      ],
      "title": "CVE-2017-7779"
    },
    {
      "cve": "CVE-2017-7782",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-7782"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "An error in the \"WindowsDllDetourPatcher\" where a RWX (\"Read/Write/Execute\") 4k block is allocated but never protected, violating DEP protections. Note: This attack only affects Windows operating systems. Other operating systems are not affected. This vulnerability affects Thunderbird \u003c 52.3, Firefox ESR \u003c 52.3, and Firefox \u003c 55.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Point of Sale 11 SP3:MozillaFirefox-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Point of Sale 11 SP3:MozillaFirefox-branding-SLED-52-24.5.1.i586",
          "SUSE Linux Enterprise Point of Sale 11 SP3:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-52.3.0esr-72.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-branding-SLED-52-24.5.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-52.3.0esr-72.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-branding-SLED-52-24.5.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.ia64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.ppc64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-7782",
          "url": "https://www.suse.com/security/cve/CVE-2017-7782"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1052829 for CVE-2017-7782",
          "url": "https://bugzilla.suse.com/1052829"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Point of Sale 11 SP3:MozillaFirefox-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Point of Sale 11 SP3:MozillaFirefox-branding-SLED-52-24.5.1.i586",
            "SUSE Linux Enterprise Point of Sale 11 SP3:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-branding-SLED-52-24.5.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-branding-SLED-52-24.5.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Point of Sale 11 SP3:MozillaFirefox-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Point of Sale 11 SP3:MozillaFirefox-branding-SLED-52-24.5.1.i586",
            "SUSE Linux Enterprise Point of Sale 11 SP3:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-branding-SLED-52-24.5.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-branding-SLED-52-24.5.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-08-30T13:31:52Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2017-7782"
    },
    {
      "cve": "CVE-2017-7784",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-7784"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A use-after-free vulnerability can occur when reading an image observer during frame reconstruction after the observer has been freed. This results in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 52.3, Firefox ESR \u003c 52.3, and Firefox \u003c 55.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Point of Sale 11 SP3:MozillaFirefox-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Point of Sale 11 SP3:MozillaFirefox-branding-SLED-52-24.5.1.i586",
          "SUSE Linux Enterprise Point of Sale 11 SP3:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-52.3.0esr-72.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-branding-SLED-52-24.5.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-52.3.0esr-72.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-branding-SLED-52-24.5.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.ia64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.ppc64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-7784",
          "url": "https://www.suse.com/security/cve/CVE-2017-7784"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1052829 for CVE-2017-7784",
          "url": "https://bugzilla.suse.com/1052829"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Point of Sale 11 SP3:MozillaFirefox-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Point of Sale 11 SP3:MozillaFirefox-branding-SLED-52-24.5.1.i586",
            "SUSE Linux Enterprise Point of Sale 11 SP3:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-branding-SLED-52-24.5.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-branding-SLED-52-24.5.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Point of Sale 11 SP3:MozillaFirefox-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Point of Sale 11 SP3:MozillaFirefox-branding-SLED-52-24.5.1.i586",
            "SUSE Linux Enterprise Point of Sale 11 SP3:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-branding-SLED-52-24.5.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-branding-SLED-52-24.5.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-08-30T13:31:52Z",
          "details": "important"
        }
      ],
      "title": "CVE-2017-7784"
    },
    {
      "cve": "CVE-2017-7785",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-7785"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A buffer overflow can occur when manipulating Accessible Rich Internet Applications (ARIA) attributes within the DOM. This results in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 52.3, Firefox ESR \u003c 52.3, and Firefox \u003c 55.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Point of Sale 11 SP3:MozillaFirefox-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Point of Sale 11 SP3:MozillaFirefox-branding-SLED-52-24.5.1.i586",
          "SUSE Linux Enterprise Point of Sale 11 SP3:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-52.3.0esr-72.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-branding-SLED-52-24.5.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-52.3.0esr-72.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-branding-SLED-52-24.5.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.ia64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.ppc64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-7785",
          "url": "https://www.suse.com/security/cve/CVE-2017-7785"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1052829 for CVE-2017-7785",
          "url": "https://bugzilla.suse.com/1052829"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Point of Sale 11 SP3:MozillaFirefox-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Point of Sale 11 SP3:MozillaFirefox-branding-SLED-52-24.5.1.i586",
            "SUSE Linux Enterprise Point of Sale 11 SP3:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-branding-SLED-52-24.5.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-branding-SLED-52-24.5.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Point of Sale 11 SP3:MozillaFirefox-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Point of Sale 11 SP3:MozillaFirefox-branding-SLED-52-24.5.1.i586",
            "SUSE Linux Enterprise Point of Sale 11 SP3:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-branding-SLED-52-24.5.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-branding-SLED-52-24.5.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-08-30T13:31:52Z",
          "details": "important"
        }
      ],
      "title": "CVE-2017-7785"
    },
    {
      "cve": "CVE-2017-7786",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-7786"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A buffer overflow can occur when the image renderer attempts to paint non-displayable SVG elements. This results in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 52.3, Firefox ESR \u003c 52.3, and Firefox \u003c 55.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Point of Sale 11 SP3:MozillaFirefox-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Point of Sale 11 SP3:MozillaFirefox-branding-SLED-52-24.5.1.i586",
          "SUSE Linux Enterprise Point of Sale 11 SP3:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-52.3.0esr-72.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-branding-SLED-52-24.5.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-52.3.0esr-72.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-branding-SLED-52-24.5.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.ia64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.ppc64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-7786",
          "url": "https://www.suse.com/security/cve/CVE-2017-7786"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1052829 for CVE-2017-7786",
          "url": "https://bugzilla.suse.com/1052829"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Point of Sale 11 SP3:MozillaFirefox-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Point of Sale 11 SP3:MozillaFirefox-branding-SLED-52-24.5.1.i586",
            "SUSE Linux Enterprise Point of Sale 11 SP3:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-branding-SLED-52-24.5.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-branding-SLED-52-24.5.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Point of Sale 11 SP3:MozillaFirefox-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Point of Sale 11 SP3:MozillaFirefox-branding-SLED-52-24.5.1.i586",
            "SUSE Linux Enterprise Point of Sale 11 SP3:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-branding-SLED-52-24.5.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-branding-SLED-52-24.5.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-08-30T13:31:52Z",
          "details": "important"
        }
      ],
      "title": "CVE-2017-7786"
    },
    {
      "cve": "CVE-2017-7787",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-7787"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Same-origin policy protections can be bypassed on pages with embedded iframes during page reloads, allowing the iframes to access content on the top level page, leading to information disclosure. This vulnerability affects Thunderbird \u003c 52.3, Firefox ESR \u003c 52.3, and Firefox \u003c 55.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Point of Sale 11 SP3:MozillaFirefox-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Point of Sale 11 SP3:MozillaFirefox-branding-SLED-52-24.5.1.i586",
          "SUSE Linux Enterprise Point of Sale 11 SP3:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-52.3.0esr-72.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-branding-SLED-52-24.5.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-52.3.0esr-72.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-branding-SLED-52-24.5.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.ia64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.ppc64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-7787",
          "url": "https://www.suse.com/security/cve/CVE-2017-7787"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1052829 for CVE-2017-7787",
          "url": "https://bugzilla.suse.com/1052829"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Point of Sale 11 SP3:MozillaFirefox-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Point of Sale 11 SP3:MozillaFirefox-branding-SLED-52-24.5.1.i586",
            "SUSE Linux Enterprise Point of Sale 11 SP3:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-branding-SLED-52-24.5.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-branding-SLED-52-24.5.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Point of Sale 11 SP3:MozillaFirefox-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Point of Sale 11 SP3:MozillaFirefox-branding-SLED-52-24.5.1.i586",
            "SUSE Linux Enterprise Point of Sale 11 SP3:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-branding-SLED-52-24.5.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-branding-SLED-52-24.5.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-08-30T13:31:52Z",
          "details": "important"
        }
      ],
      "title": "CVE-2017-7787"
    },
    {
      "cve": "CVE-2017-7791",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-7791"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "On pages containing an iframe, the \"data:\" protocol can be used to create a modal alert that will render over arbitrary domains following page navigation, spoofing of the origin of the modal alert from the iframe content. This vulnerability affects Thunderbird \u003c 52.3, Firefox ESR \u003c 52.3, and Firefox \u003c 55.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Point of Sale 11 SP3:MozillaFirefox-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Point of Sale 11 SP3:MozillaFirefox-branding-SLED-52-24.5.1.i586",
          "SUSE Linux Enterprise Point of Sale 11 SP3:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-52.3.0esr-72.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-branding-SLED-52-24.5.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-52.3.0esr-72.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-branding-SLED-52-24.5.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.ia64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.ppc64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-7791",
          "url": "https://www.suse.com/security/cve/CVE-2017-7791"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1052829 for CVE-2017-7791",
          "url": "https://bugzilla.suse.com/1052829"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Point of Sale 11 SP3:MozillaFirefox-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Point of Sale 11 SP3:MozillaFirefox-branding-SLED-52-24.5.1.i586",
            "SUSE Linux Enterprise Point of Sale 11 SP3:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-branding-SLED-52-24.5.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-branding-SLED-52-24.5.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.2,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Point of Sale 11 SP3:MozillaFirefox-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Point of Sale 11 SP3:MozillaFirefox-branding-SLED-52-24.5.1.i586",
            "SUSE Linux Enterprise Point of Sale 11 SP3:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-branding-SLED-52-24.5.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-branding-SLED-52-24.5.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-08-30T13:31:52Z",
          "details": "important"
        }
      ],
      "title": "CVE-2017-7791"
    },
    {
      "cve": "CVE-2017-7792",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-7792"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A buffer overflow will occur when viewing a certificate in the certificate manager if the certificate has an extremely long object identifier (OID). This results in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 52.3, Firefox ESR \u003c 52.3, and Firefox \u003c 55.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Point of Sale 11 SP3:MozillaFirefox-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Point of Sale 11 SP3:MozillaFirefox-branding-SLED-52-24.5.1.i586",
          "SUSE Linux Enterprise Point of Sale 11 SP3:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-52.3.0esr-72.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-branding-SLED-52-24.5.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-52.3.0esr-72.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-branding-SLED-52-24.5.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.ia64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.ppc64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-7792",
          "url": "https://www.suse.com/security/cve/CVE-2017-7792"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1052829 for CVE-2017-7792",
          "url": "https://bugzilla.suse.com/1052829"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Point of Sale 11 SP3:MozillaFirefox-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Point of Sale 11 SP3:MozillaFirefox-branding-SLED-52-24.5.1.i586",
            "SUSE Linux Enterprise Point of Sale 11 SP3:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-branding-SLED-52-24.5.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-branding-SLED-52-24.5.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Point of Sale 11 SP3:MozillaFirefox-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Point of Sale 11 SP3:MozillaFirefox-branding-SLED-52-24.5.1.i586",
            "SUSE Linux Enterprise Point of Sale 11 SP3:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-branding-SLED-52-24.5.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-branding-SLED-52-24.5.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-08-30T13:31:52Z",
          "details": "important"
        }
      ],
      "title": "CVE-2017-7792"
    },
    {
      "cve": "CVE-2017-7798",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-7798"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The Developer Tools feature suffers from a XUL injection vulnerability due to improper sanitization of the web page source code. In the worst case, this could allow arbitrary code execution when opening a malicious page with the style editor tool. This vulnerability affects Firefox ESR \u003c 52.3 and Firefox \u003c 55.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Point of Sale 11 SP3:MozillaFirefox-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Point of Sale 11 SP3:MozillaFirefox-branding-SLED-52-24.5.1.i586",
          "SUSE Linux Enterprise Point of Sale 11 SP3:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-52.3.0esr-72.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-branding-SLED-52-24.5.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-52.3.0esr-72.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-branding-SLED-52-24.5.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.ia64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.ppc64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-7798",
          "url": "https://www.suse.com/security/cve/CVE-2017-7798"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1052829 for CVE-2017-7798",
          "url": "https://bugzilla.suse.com/1052829"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Point of Sale 11 SP3:MozillaFirefox-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Point of Sale 11 SP3:MozillaFirefox-branding-SLED-52-24.5.1.i586",
            "SUSE Linux Enterprise Point of Sale 11 SP3:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-branding-SLED-52-24.5.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-branding-SLED-52-24.5.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Point of Sale 11 SP3:MozillaFirefox-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Point of Sale 11 SP3:MozillaFirefox-branding-SLED-52-24.5.1.i586",
            "SUSE Linux Enterprise Point of Sale 11 SP3:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-branding-SLED-52-24.5.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-branding-SLED-52-24.5.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-08-30T13:31:52Z",
          "details": "important"
        }
      ],
      "title": "CVE-2017-7798"
    },
    {
      "cve": "CVE-2017-7800",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-7800"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A use-after-free vulnerability can occur in WebSockets when the object holding the connection is freed before the disconnection operation is finished. This results in an exploitable crash. This vulnerability affects Thunderbird \u003c 52.3, Firefox ESR \u003c 52.3, and Firefox \u003c 55.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Point of Sale 11 SP3:MozillaFirefox-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Point of Sale 11 SP3:MozillaFirefox-branding-SLED-52-24.5.1.i586",
          "SUSE Linux Enterprise Point of Sale 11 SP3:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-52.3.0esr-72.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-branding-SLED-52-24.5.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-52.3.0esr-72.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-branding-SLED-52-24.5.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.ia64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.ppc64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-7800",
          "url": "https://www.suse.com/security/cve/CVE-2017-7800"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1052829 for CVE-2017-7800",
          "url": "https://bugzilla.suse.com/1052829"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Point of Sale 11 SP3:MozillaFirefox-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Point of Sale 11 SP3:MozillaFirefox-branding-SLED-52-24.5.1.i586",
            "SUSE Linux Enterprise Point of Sale 11 SP3:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-branding-SLED-52-24.5.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-branding-SLED-52-24.5.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Point of Sale 11 SP3:MozillaFirefox-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Point of Sale 11 SP3:MozillaFirefox-branding-SLED-52-24.5.1.i586",
            "SUSE Linux Enterprise Point of Sale 11 SP3:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-branding-SLED-52-24.5.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-branding-SLED-52-24.5.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-08-30T13:31:52Z",
          "details": "important"
        }
      ],
      "title": "CVE-2017-7800"
    },
    {
      "cve": "CVE-2017-7801",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-7801"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A use-after-free vulnerability can occur while re-computing layout for a \"marquee\" element during window resizing where the updated style object is freed while still in use. This results in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 52.3, Firefox ESR \u003c 52.3, and Firefox \u003c 55.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Point of Sale 11 SP3:MozillaFirefox-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Point of Sale 11 SP3:MozillaFirefox-branding-SLED-52-24.5.1.i586",
          "SUSE Linux Enterprise Point of Sale 11 SP3:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-52.3.0esr-72.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-branding-SLED-52-24.5.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-52.3.0esr-72.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-branding-SLED-52-24.5.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.ia64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.ppc64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-7801",
          "url": "https://www.suse.com/security/cve/CVE-2017-7801"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1052829 for CVE-2017-7801",
          "url": "https://bugzilla.suse.com/1052829"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Point of Sale 11 SP3:MozillaFirefox-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Point of Sale 11 SP3:MozillaFirefox-branding-SLED-52-24.5.1.i586",
            "SUSE Linux Enterprise Point of Sale 11 SP3:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-branding-SLED-52-24.5.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-branding-SLED-52-24.5.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Point of Sale 11 SP3:MozillaFirefox-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Point of Sale 11 SP3:MozillaFirefox-branding-SLED-52-24.5.1.i586",
            "SUSE Linux Enterprise Point of Sale 11 SP3:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-branding-SLED-52-24.5.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-branding-SLED-52-24.5.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-08-30T13:31:52Z",
          "details": "important"
        }
      ],
      "title": "CVE-2017-7801"
    },
    {
      "cve": "CVE-2017-7802",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-7802"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A use-after-free vulnerability can occur when manipulating the DOM during the resize event of an image element. If these elements have been freed due to a lack of strong references, a potentially exploitable crash may occur when the freed elements are accessed. This vulnerability affects Thunderbird \u003c 52.3, Firefox ESR \u003c 52.3, and Firefox \u003c 55.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Point of Sale 11 SP3:MozillaFirefox-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Point of Sale 11 SP3:MozillaFirefox-branding-SLED-52-24.5.1.i586",
          "SUSE Linux Enterprise Point of Sale 11 SP3:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-52.3.0esr-72.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-branding-SLED-52-24.5.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-52.3.0esr-72.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-branding-SLED-52-24.5.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.ia64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.ppc64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-7802",
          "url": "https://www.suse.com/security/cve/CVE-2017-7802"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1052829 for CVE-2017-7802",
          "url": "https://bugzilla.suse.com/1052829"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Point of Sale 11 SP3:MozillaFirefox-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Point of Sale 11 SP3:MozillaFirefox-branding-SLED-52-24.5.1.i586",
            "SUSE Linux Enterprise Point of Sale 11 SP3:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-branding-SLED-52-24.5.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-branding-SLED-52-24.5.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Point of Sale 11 SP3:MozillaFirefox-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Point of Sale 11 SP3:MozillaFirefox-branding-SLED-52-24.5.1.i586",
            "SUSE Linux Enterprise Point of Sale 11 SP3:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-branding-SLED-52-24.5.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-branding-SLED-52-24.5.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-08-30T13:31:52Z",
          "details": "important"
        }
      ],
      "title": "CVE-2017-7802"
    },
    {
      "cve": "CVE-2017-7803",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-7803"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "When a page\u0027s content security policy (CSP) header contains a \"sandbox\" directive, other directives are ignored. This results in the incorrect enforcement of CSP. This vulnerability affects Thunderbird \u003c 52.3, Firefox ESR \u003c 52.3, and Firefox \u003c 55.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Point of Sale 11 SP3:MozillaFirefox-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Point of Sale 11 SP3:MozillaFirefox-branding-SLED-52-24.5.1.i586",
          "SUSE Linux Enterprise Point of Sale 11 SP3:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-52.3.0esr-72.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-branding-SLED-52-24.5.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-52.3.0esr-72.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-branding-SLED-52-24.5.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.ia64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.ppc64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-7803",
          "url": "https://www.suse.com/security/cve/CVE-2017-7803"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1052829 for CVE-2017-7803",
          "url": "https://bugzilla.suse.com/1052829"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Point of Sale 11 SP3:MozillaFirefox-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Point of Sale 11 SP3:MozillaFirefox-branding-SLED-52-24.5.1.i586",
            "SUSE Linux Enterprise Point of Sale 11 SP3:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-branding-SLED-52-24.5.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-branding-SLED-52-24.5.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Point of Sale 11 SP3:MozillaFirefox-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Point of Sale 11 SP3:MozillaFirefox-branding-SLED-52-24.5.1.i586",
            "SUSE Linux Enterprise Point of Sale 11 SP3:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-branding-SLED-52-24.5.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-branding-SLED-52-24.5.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-08-30T13:31:52Z",
          "details": "important"
        }
      ],
      "title": "CVE-2017-7803"
    },
    {
      "cve": "CVE-2017-7804",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-7804"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The destructor function for the \"WindowsDllDetourPatcher\" class can be re-purposed by malicious code in concert with another vulnerability to write arbitrary data to an attacker controlled location in memory. This can be used to bypass existing memory protections in this situation. Note: This attack only affects Windows operating systems. Other operating systems are not affected. This vulnerability affects Thunderbird \u003c 52.3, Firefox ESR \u003c 52.3, and Firefox \u003c 55.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Point of Sale 11 SP3:MozillaFirefox-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Point of Sale 11 SP3:MozillaFirefox-branding-SLED-52-24.5.1.i586",
          "SUSE Linux Enterprise Point of Sale 11 SP3:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-52.3.0esr-72.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-branding-SLED-52-24.5.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-52.3.0esr-72.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-branding-SLED-52-24.5.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.ia64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.ppc64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-7804",
          "url": "https://www.suse.com/security/cve/CVE-2017-7804"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1052829 for CVE-2017-7804",
          "url": "https://bugzilla.suse.com/1052829"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Point of Sale 11 SP3:MozillaFirefox-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Point of Sale 11 SP3:MozillaFirefox-branding-SLED-52-24.5.1.i586",
            "SUSE Linux Enterprise Point of Sale 11 SP3:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-branding-SLED-52-24.5.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-branding-SLED-52-24.5.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Point of Sale 11 SP3:MozillaFirefox-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Point of Sale 11 SP3:MozillaFirefox-branding-SLED-52-24.5.1.i586",
            "SUSE Linux Enterprise Point of Sale 11 SP3:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-branding-SLED-52-24.5.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-branding-SLED-52-24.5.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-08-30T13:31:52Z",
          "details": "important"
        }
      ],
      "title": "CVE-2017-7804"
    },
    {
      "cve": "CVE-2017-7807",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-7807"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A mechanism that uses AppCache to hijack a URL in a domain using fallback by serving the files from a sub-path on the domain. This has been addressed by requiring fallback files be inside the manifest directory. This vulnerability affects Thunderbird \u003c 52.3, Firefox ESR \u003c 52.3, and Firefox \u003c 55.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Point of Sale 11 SP3:MozillaFirefox-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Point of Sale 11 SP3:MozillaFirefox-branding-SLED-52-24.5.1.i586",
          "SUSE Linux Enterprise Point of Sale 11 SP3:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-52.3.0esr-72.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-branding-SLED-52-24.5.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-52.3.0esr-72.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-branding-SLED-52-24.5.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.i586",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.ia64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.ppc64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-7807",
          "url": "https://www.suse.com/security/cve/CVE-2017-7807"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1052829 for CVE-2017-7807",
          "url": "https://bugzilla.suse.com/1052829"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Point of Sale 11 SP3:MozillaFirefox-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Point of Sale 11 SP3:MozillaFirefox-branding-SLED-52-24.5.1.i586",
            "SUSE Linux Enterprise Point of Sale 11 SP3:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-branding-SLED-52-24.5.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-branding-SLED-52-24.5.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Point of Sale 11 SP3:MozillaFirefox-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Point of Sale 11 SP3:MozillaFirefox-branding-SLED-52-24.5.1.i586",
            "SUSE Linux Enterprise Point of Sale 11 SP3:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-branding-SLED-52-24.5.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-branding-SLED-52-24.5.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-branding-SLED-52-24.5.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:MozillaFirefox-translations-52.3.0esr-72.9.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-52.3.0esr-72.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-08-30T13:31:52Z",
          "details": "important"
        }
      ],
      "title": "CVE-2017-7807"
    }
  ]
}

CVE-2017-7807 (GCVE-0-2017-7807)

Vulnerability from cvelistv5

Published

2018-06-11 21:00

Modified

2024-08-05 16:12

Severity ?

CWE

Domain hijacking through AppCache fallback

Summary

A mechanism that uses AppCache to hijack a URL in a domain using fallback by serving the files from a sub-path on the domain. This has been addressed by requiring fallback files be inside the manifest directory. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55.

References

►

URL

Tags

	https://www.mozilla.org/security/advisories/mfsa2017-19/	x_refsource_CONFIRM
	https://www.mozilla.org/security/advisories/mfsa2017-20/	x_refsource_CONFIRM
	https://www.debian.org/security/2017/dsa-3968	vendor-advisory, x_refsource_DEBIAN
	http://www.securityfocus.com/bid/100242	vdb-entry, x_refsource_BID
	https://www.mozilla.org/security/advisories/mfsa2017-18/	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHSA-2017:2456	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2017:2534	vendor-advisory, x_refsource_REDHAT
	https://bugzilla.mozilla.org/show_bug.cgi?id=1376459	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1039124	vdb-entry, x_refsource_SECTRACK
	https://security.gentoo.org/glsa/201803-14	vendor-advisory, x_refsource_GENTOO
	https://www.debian.org/security/2017/dsa-3928	vendor-advisory, x_refsource_DEBIAN

Impacted products

Vendor

Product

Version

►

Mozilla

Thunderbird

Version: unspecified < 52.3

	Mozilla	Firefox ESR	Version: unspecified < 52.3
	Mozilla	Firefox	Version: unspecified < 55

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T16:12:28.435Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-19/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-20/"
          },
          {
            "name": "DSA-3968",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2017/dsa-3968"
          },
          {
            "name": "100242",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/100242"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-18/"
          },
          {
            "name": "RHSA-2017:2456",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2456"
          },
          {
            "name": "RHSA-2017:2534",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2534"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1376459"
          },
          {
            "name": "1039124",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1039124"
          },
          {
            "name": "GLSA-201803-14",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201803-14"
          },
          {
            "name": "DSA-3928",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2017/dsa-3928"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "52.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "52.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "55",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "datePublic": "2017-08-08T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "A mechanism that uses AppCache to hijack a URL in a domain using fallback by serving the files from a sub-path on the domain. This has been addressed by requiring fallback files be inside the manifest directory. This vulnerability affects Thunderbird \u003c 52.3, Firefox ESR \u003c 52.3, and Firefox \u003c 55."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Domain hijacking through AppCache fallback",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-06-12T09:57:01",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-19/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-20/"
        },
        {
          "name": "DSA-3968",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2017/dsa-3968"
        },
        {
          "name": "100242",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/100242"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-18/"
        },
        {
          "name": "RHSA-2017:2456",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2456"
        },
        {
          "name": "RHSA-2017:2534",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2534"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1376459"
        },
        {
          "name": "1039124",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1039124"
        },
        {
          "name": "GLSA-201803-14",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201803-14"
        },
        {
          "name": "DSA-3928",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2017/dsa-3928"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@mozilla.org",
          "ID": "CVE-2017-7807",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Thunderbird",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "52.3"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Firefox ESR",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "52.3"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Firefox",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "55"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Mozilla"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A mechanism that uses AppCache to hijack a URL in a domain using fallback by serving the files from a sub-path on the domain. This has been addressed by requiring fallback files be inside the manifest directory. This vulnerability affects Thunderbird \u003c 52.3, Firefox ESR \u003c 52.3, and Firefox \u003c 55."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Domain hijacking through AppCache fallback"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-19/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-19/"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-20/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-20/"
            },
            {
              "name": "DSA-3968",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2017/dsa-3968"
            },
            {
              "name": "100242",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/100242"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-18/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-18/"
            },
            {
              "name": "RHSA-2017:2456",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2456"
            },
            {
              "name": "RHSA-2017:2534",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2534"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1376459",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1376459"
            },
            {
              "name": "1039124",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1039124"
            },
            {
              "name": "GLSA-201803-14",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201803-14"
            },
            {
              "name": "DSA-3928",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2017/dsa-3928"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2017-7807",
    "datePublished": "2018-06-11T21:00:00",
    "dateReserved": "2017-04-12T00:00:00",
    "dateUpdated": "2024-08-05T16:12:28.435Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-7779 (GCVE-0-2017-7779)

Vulnerability from cvelistv5

Published

2018-06-11 21:00

Modified

2024-08-05 16:12

Severity ?

CWE

Memory safety bugs fixed in Firefox 55, Firefox ESR 52.3, and Thunderbird 52.3

Summary

Memory safety bugs were reported in Firefox 54, Firefox ESR 52.2, and Thunderbird 52.2. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55.

References

►

URL

Tags

	https://www.mozilla.org/security/advisories/mfsa2017-19/	x_refsource_CONFIRM
	https://www.mozilla.org/security/advisories/mfsa2017-20/	x_refsource_CONFIRM
	https://www.debian.org/security/2017/dsa-3968	vendor-advisory, x_refsource_DEBIAN
	http://www.securityfocus.com/bid/100201	vdb-entry, x_refsource_BID
	https://www.mozilla.org/security/advisories/mfsa2017-18/	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHSA-2017:2456	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2017:2534	vendor-advisory, x_refsource_REDHAT
	http://www.securitytracker.com/id/1039124	vdb-entry, x_refsource_SECTRACK
	https://bugzilla.mozilla.org/buglist.cgi?bug_id=1354443%2C1368576%2C1366903%2C1369913%2C1371424%2C1346590%2C1371890%2C1372985%2C1362924%2C1368105%2C1369994%2C1371283%2C1368362%2C1378826%2C1380426%2C1368030%2C1373220%2C1321384%2C1383002	x_refsource_CONFIRM
	https://security.gentoo.org/glsa/201803-14	vendor-advisory, x_refsource_GENTOO
	https://www.debian.org/security/2017/dsa-3928	vendor-advisory, x_refsource_DEBIAN

Impacted products

Vendor

Product

Version

►

Mozilla

Thunderbird

Version: unspecified < 52.3

	Mozilla	Firefox ESR	Version: unspecified < 52.3
	Mozilla	Firefox	Version: unspecified < 55

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T16:12:28.265Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-19/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-20/"
          },
          {
            "name": "DSA-3968",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2017/dsa-3968"
          },
          {
            "name": "100201",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/100201"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-18/"
          },
          {
            "name": "RHSA-2017:2456",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2456"
          },
          {
            "name": "RHSA-2017:2534",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2534"
          },
          {
            "name": "1039124",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1039124"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1354443%2C1368576%2C1366903%2C1369913%2C1371424%2C1346590%2C1371890%2C1372985%2C1362924%2C1368105%2C1369994%2C1371283%2C1368362%2C1378826%2C1380426%2C1368030%2C1373220%2C1321384%2C1383002"
          },
          {
            "name": "GLSA-201803-14",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201803-14"
          },
          {
            "name": "DSA-3928",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2017/dsa-3928"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "52.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "52.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "55",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "datePublic": "2017-08-08T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Memory safety bugs were reported in Firefox 54, Firefox ESR 52.2, and Thunderbird 52.2. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Thunderbird \u003c 52.3, Firefox ESR \u003c 52.3, and Firefox \u003c 55."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Memory safety bugs fixed in Firefox 55, Firefox ESR 52.3, and Thunderbird 52.3",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-06-12T09:57:01",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-19/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-20/"
        },
        {
          "name": "DSA-3968",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2017/dsa-3968"
        },
        {
          "name": "100201",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/100201"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-18/"
        },
        {
          "name": "RHSA-2017:2456",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2456"
        },
        {
          "name": "RHSA-2017:2534",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2534"
        },
        {
          "name": "1039124",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1039124"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1354443%2C1368576%2C1366903%2C1369913%2C1371424%2C1346590%2C1371890%2C1372985%2C1362924%2C1368105%2C1369994%2C1371283%2C1368362%2C1378826%2C1380426%2C1368030%2C1373220%2C1321384%2C1383002"
        },
        {
          "name": "GLSA-201803-14",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201803-14"
        },
        {
          "name": "DSA-3928",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2017/dsa-3928"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@mozilla.org",
          "ID": "CVE-2017-7779",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Thunderbird",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "52.3"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Firefox ESR",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "52.3"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Firefox",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "55"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Mozilla"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Memory safety bugs were reported in Firefox 54, Firefox ESR 52.2, and Thunderbird 52.2. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Thunderbird \u003c 52.3, Firefox ESR \u003c 52.3, and Firefox \u003c 55."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Memory safety bugs fixed in Firefox 55, Firefox ESR 52.3, and Thunderbird 52.3"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-19/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-19/"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-20/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-20/"
            },
            {
              "name": "DSA-3968",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2017/dsa-3968"
            },
            {
              "name": "100201",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/100201"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-18/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-18/"
            },
            {
              "name": "RHSA-2017:2456",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2456"
            },
            {
              "name": "RHSA-2017:2534",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2534"
            },
            {
              "name": "1039124",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1039124"
            },
            {
              "name": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1354443%2C1368576%2C1366903%2C1369913%2C1371424%2C1346590%2C1371890%2C1372985%2C1362924%2C1368105%2C1369994%2C1371283%2C1368362%2C1378826%2C1380426%2C1368030%2C1373220%2C1321384%2C1383002",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1354443%2C1368576%2C1366903%2C1369913%2C1371424%2C1346590%2C1371890%2C1372985%2C1362924%2C1368105%2C1369994%2C1371283%2C1368362%2C1378826%2C1380426%2C1368030%2C1373220%2C1321384%2C1383002"
            },
            {
              "name": "GLSA-201803-14",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201803-14"
            },
            {
              "name": "DSA-3928",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2017/dsa-3928"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2017-7779",
    "datePublished": "2018-06-11T21:00:00",
    "dateReserved": "2017-04-12T00:00:00",
    "dateUpdated": "2024-08-05T16:12:28.265Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-7798 (GCVE-0-2017-7798)

Vulnerability from cvelistv5

Published

2018-06-11 21:00

Modified

2024-08-05 16:12

Severity ?

CWE

XUL injection in the style editor in devtools

Summary

The Developer Tools feature suffers from a XUL injection vulnerability due to improper sanitization of the web page source code. In the worst case, this could allow arbitrary code execution when opening a malicious page with the style editor tool. This vulnerability affects Firefox ESR < 52.3 and Firefox < 55.

References

►

URL

Tags

	https://www.mozilla.org/security/advisories/mfsa2017-19/	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/100198	vdb-entry, x_refsource_BID
	https://www.mozilla.org/security/advisories/mfsa2017-18/	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHSA-2017:2456	vendor-advisory, x_refsource_REDHAT
	https://bugzilla.mozilla.org/buglist.cgi?bug_id=1371586%2C1372112	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1039124	vdb-entry, x_refsource_SECTRACK
	https://www.debian.org/security/2017/dsa-3928	vendor-advisory, x_refsource_DEBIAN

Impacted products

Vendor

Product

Version

►

Mozilla

Firefox ESR

Version: unspecified < 52.3

Mozilla

Firefox

Version: unspecified < 55

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T16:12:28.384Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-19/"
          },
          {
            "name": "100198",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/100198"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-18/"
          },
          {
            "name": "RHSA-2017:2456",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2456"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1371586%2C1372112"
          },
          {
            "name": "1039124",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1039124"
          },
          {
            "name": "DSA-3928",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2017/dsa-3928"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "52.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "55",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "datePublic": "2017-08-08T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The Developer Tools feature suffers from a XUL injection vulnerability due to improper sanitization of the web page source code. In the worst case, this could allow arbitrary code execution when opening a malicious page with the style editor tool. This vulnerability affects Firefox ESR \u003c 52.3 and Firefox \u003c 55."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "XUL injection in the style editor in devtools",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-06-12T09:57:01",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-19/"
        },
        {
          "name": "100198",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/100198"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-18/"
        },
        {
          "name": "RHSA-2017:2456",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2456"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1371586%2C1372112"
        },
        {
          "name": "1039124",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1039124"
        },
        {
          "name": "DSA-3928",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2017/dsa-3928"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@mozilla.org",
          "ID": "CVE-2017-7798",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Firefox ESR",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "52.3"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Firefox",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "55"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Mozilla"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The Developer Tools feature suffers from a XUL injection vulnerability due to improper sanitization of the web page source code. In the worst case, this could allow arbitrary code execution when opening a malicious page with the style editor tool. This vulnerability affects Firefox ESR \u003c 52.3 and Firefox \u003c 55."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "XUL injection in the style editor in devtools"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-19/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-19/"
            },
            {
              "name": "100198",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/100198"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-18/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-18/"
            },
            {
              "name": "RHSA-2017:2456",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2456"
            },
            {
              "name": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1371586%2C1372112",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1371586%2C1372112"
            },
            {
              "name": "1039124",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1039124"
            },
            {
              "name": "DSA-3928",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2017/dsa-3928"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2017-7798",
    "datePublished": "2018-06-11T21:00:00",
    "dateReserved": "2017-04-12T00:00:00",
    "dateUpdated": "2024-08-05T16:12:28.384Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-7801 (GCVE-0-2017-7801)

Vulnerability from cvelistv5

Published

2018-06-11 21:00

Modified

2024-08-05 16:12

Severity ?

CWE

Use-after-free with marquee during window resizing

Summary

A use-after-free vulnerability can occur while re-computing layout for a "marquee" element during window resizing where the updated style object is freed while still in use. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55.

References

►

URL

Tags

	https://www.mozilla.org/security/advisories/mfsa2017-19/	x_refsource_CONFIRM
	https://www.mozilla.org/security/advisories/mfsa2017-20/	x_refsource_CONFIRM
	https://www.debian.org/security/2017/dsa-3968	vendor-advisory, x_refsource_DEBIAN
	http://www.securityfocus.com/bid/100197	vdb-entry, x_refsource_BID
	https://www.mozilla.org/security/advisories/mfsa2017-18/	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHSA-2017:2456	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2017:2534	vendor-advisory, x_refsource_REDHAT
	http://www.securitytracker.com/id/1039124	vdb-entry, x_refsource_SECTRACK
	https://security.gentoo.org/glsa/201803-14	vendor-advisory, x_refsource_GENTOO
	https://bugzilla.mozilla.org/show_bug.cgi?id=1371259	x_refsource_CONFIRM
	https://www.debian.org/security/2017/dsa-3928	vendor-advisory, x_refsource_DEBIAN

Impacted products

Vendor

Product

Version

►

Mozilla

Thunderbird

Version: unspecified < 52.3

	Mozilla	Firefox ESR	Version: unspecified < 52.3
	Mozilla	Firefox	Version: unspecified < 55

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T16:12:28.379Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-19/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-20/"
          },
          {
            "name": "DSA-3968",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2017/dsa-3968"
          },
          {
            "name": "100197",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/100197"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-18/"
          },
          {
            "name": "RHSA-2017:2456",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2456"
          },
          {
            "name": "RHSA-2017:2534",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2534"
          },
          {
            "name": "1039124",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1039124"
          },
          {
            "name": "GLSA-201803-14",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201803-14"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1371259"
          },
          {
            "name": "DSA-3928",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2017/dsa-3928"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "52.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "52.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "55",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "datePublic": "2017-08-08T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "A use-after-free vulnerability can occur while re-computing layout for a \"marquee\" element during window resizing where the updated style object is freed while still in use. This results in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 52.3, Firefox ESR \u003c 52.3, and Firefox \u003c 55."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Use-after-free with marquee during window resizing",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-06-12T09:57:01",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-19/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-20/"
        },
        {
          "name": "DSA-3968",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2017/dsa-3968"
        },
        {
          "name": "100197",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/100197"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-18/"
        },
        {
          "name": "RHSA-2017:2456",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2456"
        },
        {
          "name": "RHSA-2017:2534",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2534"
        },
        {
          "name": "1039124",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1039124"
        },
        {
          "name": "GLSA-201803-14",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201803-14"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1371259"
        },
        {
          "name": "DSA-3928",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2017/dsa-3928"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@mozilla.org",
          "ID": "CVE-2017-7801",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Thunderbird",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "52.3"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Firefox ESR",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "52.3"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Firefox",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "55"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Mozilla"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A use-after-free vulnerability can occur while re-computing layout for a \"marquee\" element during window resizing where the updated style object is freed while still in use. This results in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 52.3, Firefox ESR \u003c 52.3, and Firefox \u003c 55."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Use-after-free with marquee during window resizing"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-19/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-19/"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-20/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-20/"
            },
            {
              "name": "DSA-3968",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2017/dsa-3968"
            },
            {
              "name": "100197",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/100197"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-18/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-18/"
            },
            {
              "name": "RHSA-2017:2456",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2456"
            },
            {
              "name": "RHSA-2017:2534",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2534"
            },
            {
              "name": "1039124",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1039124"
            },
            {
              "name": "GLSA-201803-14",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201803-14"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1371259",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1371259"
            },
            {
              "name": "DSA-3928",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2017/dsa-3928"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2017-7801",
    "datePublished": "2018-06-11T21:00:00",
    "dateReserved": "2017-04-12T00:00:00",
    "dateUpdated": "2024-08-05T16:12:28.379Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-7800 (GCVE-0-2017-7800)

Vulnerability from cvelistv5

Published

2018-06-11 21:00

Modified

2024-08-05 16:12

Severity ?

CWE

Use-after-free in WebSockets during disconnection

Summary

A use-after-free vulnerability can occur in WebSockets when the object holding the connection is freed before the disconnection operation is finished. This results in an exploitable crash. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55.

References

►

URL

Tags

	https://www.mozilla.org/security/advisories/mfsa2017-19/	x_refsource_CONFIRM
	https://www.mozilla.org/security/advisories/mfsa2017-20/	x_refsource_CONFIRM
	https://bugzilla.mozilla.org/show_bug.cgi?id=1374047	x_refsource_CONFIRM
	https://www.debian.org/security/2017/dsa-3968	vendor-advisory, x_refsource_DEBIAN
	https://www.mozilla.org/security/advisories/mfsa2017-18/	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHSA-2017:2456	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2017:2534	vendor-advisory, x_refsource_REDHAT
	http://www.securityfocus.com/bid/100196	vdb-entry, x_refsource_BID
	http://www.securitytracker.com/id/1039124	vdb-entry, x_refsource_SECTRACK
	https://security.gentoo.org/glsa/201803-14	vendor-advisory, x_refsource_GENTOO
	https://www.debian.org/security/2017/dsa-3928	vendor-advisory, x_refsource_DEBIAN

Impacted products

Vendor

Product

Version

►

Mozilla

Thunderbird

Version: unspecified < 52.3

	Mozilla	Firefox ESR	Version: unspecified < 52.3
	Mozilla	Firefox	Version: unspecified < 55

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T16:12:28.512Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-19/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-20/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1374047"
          },
          {
            "name": "DSA-3968",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2017/dsa-3968"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-18/"
          },
          {
            "name": "RHSA-2017:2456",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2456"
          },
          {
            "name": "RHSA-2017:2534",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2534"
          },
          {
            "name": "100196",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/100196"
          },
          {
            "name": "1039124",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1039124"
          },
          {
            "name": "GLSA-201803-14",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201803-14"
          },
          {
            "name": "DSA-3928",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2017/dsa-3928"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "52.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "52.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "55",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "datePublic": "2017-08-08T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "A use-after-free vulnerability can occur in WebSockets when the object holding the connection is freed before the disconnection operation is finished. This results in an exploitable crash. This vulnerability affects Thunderbird \u003c 52.3, Firefox ESR \u003c 52.3, and Firefox \u003c 55."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Use-after-free in WebSockets during disconnection",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-06-12T09:57:01",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-19/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-20/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1374047"
        },
        {
          "name": "DSA-3968",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2017/dsa-3968"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-18/"
        },
        {
          "name": "RHSA-2017:2456",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2456"
        },
        {
          "name": "RHSA-2017:2534",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2534"
        },
        {
          "name": "100196",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/100196"
        },
        {
          "name": "1039124",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1039124"
        },
        {
          "name": "GLSA-201803-14",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201803-14"
        },
        {
          "name": "DSA-3928",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2017/dsa-3928"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@mozilla.org",
          "ID": "CVE-2017-7800",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Thunderbird",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "52.3"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Firefox ESR",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "52.3"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Firefox",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "55"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Mozilla"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A use-after-free vulnerability can occur in WebSockets when the object holding the connection is freed before the disconnection operation is finished. This results in an exploitable crash. This vulnerability affects Thunderbird \u003c 52.3, Firefox ESR \u003c 52.3, and Firefox \u003c 55."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Use-after-free in WebSockets during disconnection"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-19/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-19/"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-20/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-20/"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1374047",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1374047"
            },
            {
              "name": "DSA-3968",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2017/dsa-3968"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-18/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-18/"
            },
            {
              "name": "RHSA-2017:2456",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2456"
            },
            {
              "name": "RHSA-2017:2534",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2534"
            },
            {
              "name": "100196",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/100196"
            },
            {
              "name": "1039124",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1039124"
            },
            {
              "name": "GLSA-201803-14",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201803-14"
            },
            {
              "name": "DSA-3928",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2017/dsa-3928"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2017-7800",
    "datePublished": "2018-06-11T21:00:00",
    "dateReserved": "2017-04-12T00:00:00",
    "dateUpdated": "2024-08-05T16:12:28.512Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-7785 (GCVE-0-2017-7785)

Vulnerability from cvelistv5

Published

2018-06-11 21:00

Modified

2024-08-05 16:12

Severity ?

CWE

Buffer overflow manipulating ARIA attributes in DOM

Summary

A buffer overflow can occur when manipulating Accessible Rich Internet Applications (ARIA) attributes within the DOM. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55.

References

►

URL

Tags

	https://www.mozilla.org/security/advisories/mfsa2017-19/	x_refsource_CONFIRM
	https://www.mozilla.org/security/advisories/mfsa2017-20/	x_refsource_CONFIRM
	https://bugzilla.mozilla.org/show_bug.cgi?id=1356985	x_refsource_CONFIRM
	https://www.debian.org/security/2017/dsa-3968	vendor-advisory, x_refsource_DEBIAN
	https://www.mozilla.org/security/advisories/mfsa2017-18/	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHSA-2017:2456	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2017:2534	vendor-advisory, x_refsource_REDHAT
	http://www.securityfocus.com/bid/100206	vdb-entry, x_refsource_BID
	http://www.securitytracker.com/id/1039124	vdb-entry, x_refsource_SECTRACK
	https://security.gentoo.org/glsa/201803-14	vendor-advisory, x_refsource_GENTOO
	https://www.debian.org/security/2017/dsa-3928	vendor-advisory, x_refsource_DEBIAN

Impacted products

Vendor

Product

Version

►

Mozilla

Thunderbird

Version: unspecified < 52.3

	Mozilla	Firefox ESR	Version: unspecified < 52.3
	Mozilla	Firefox	Version: unspecified < 55

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T16:12:28.371Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-19/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-20/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1356985"
          },
          {
            "name": "DSA-3968",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2017/dsa-3968"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-18/"
          },
          {
            "name": "RHSA-2017:2456",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2456"
          },
          {
            "name": "RHSA-2017:2534",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2534"
          },
          {
            "name": "100206",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/100206"
          },
          {
            "name": "1039124",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1039124"
          },
          {
            "name": "GLSA-201803-14",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201803-14"
          },
          {
            "name": "DSA-3928",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2017/dsa-3928"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "52.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "52.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "55",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "datePublic": "2017-08-08T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "A buffer overflow can occur when manipulating Accessible Rich Internet Applications (ARIA) attributes within the DOM. This results in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 52.3, Firefox ESR \u003c 52.3, and Firefox \u003c 55."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Buffer overflow manipulating ARIA attributes in DOM",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-06-12T09:57:01",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-19/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-20/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1356985"
        },
        {
          "name": "DSA-3968",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2017/dsa-3968"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-18/"
        },
        {
          "name": "RHSA-2017:2456",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2456"
        },
        {
          "name": "RHSA-2017:2534",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2534"
        },
        {
          "name": "100206",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/100206"
        },
        {
          "name": "1039124",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1039124"
        },
        {
          "name": "GLSA-201803-14",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201803-14"
        },
        {
          "name": "DSA-3928",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2017/dsa-3928"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@mozilla.org",
          "ID": "CVE-2017-7785",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Thunderbird",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "52.3"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Firefox ESR",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "52.3"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Firefox",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "55"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Mozilla"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A buffer overflow can occur when manipulating Accessible Rich Internet Applications (ARIA) attributes within the DOM. This results in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 52.3, Firefox ESR \u003c 52.3, and Firefox \u003c 55."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Buffer overflow manipulating ARIA attributes in DOM"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-19/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-19/"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-20/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-20/"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1356985",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1356985"
            },
            {
              "name": "DSA-3968",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2017/dsa-3968"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-18/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-18/"
            },
            {
              "name": "RHSA-2017:2456",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2456"
            },
            {
              "name": "RHSA-2017:2534",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2534"
            },
            {
              "name": "100206",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/100206"
            },
            {
              "name": "1039124",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1039124"
            },
            {
              "name": "GLSA-201803-14",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201803-14"
            },
            {
              "name": "DSA-3928",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2017/dsa-3928"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2017-7785",
    "datePublished": "2018-06-11T21:00:00",
    "dateReserved": "2017-04-12T00:00:00",
    "dateUpdated": "2024-08-05T16:12:28.371Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-7803 (GCVE-0-2017-7803)

Vulnerability from cvelistv5

Published

2018-06-11 21:00

Modified

2024-08-05 16:12

Severity ?

CWE

CSP containing 'sandbox' improperly applied

Summary

When a page's content security policy (CSP) header contains a "sandbox" directive, other directives are ignored. This results in the incorrect enforcement of CSP. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55.

References

►

URL

Tags

	https://www.mozilla.org/security/advisories/mfsa2017-19/	x_refsource_CONFIRM
	https://www.mozilla.org/security/advisories/mfsa2017-20/	x_refsource_CONFIRM
	https://www.debian.org/security/2017/dsa-3968	vendor-advisory, x_refsource_DEBIAN
	https://www.mozilla.org/security/advisories/mfsa2017-18/	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHSA-2017:2456	vendor-advisory, x_refsource_REDHAT
	http://www.securityfocus.com/bid/100234	vdb-entry, x_refsource_BID
	https://access.redhat.com/errata/RHSA-2017:2534	vendor-advisory, x_refsource_REDHAT
	https://bugzilla.mozilla.org/show_bug.cgi?id=1377426	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1039124	vdb-entry, x_refsource_SECTRACK
	https://security.gentoo.org/glsa/201803-14	vendor-advisory, x_refsource_GENTOO
	https://www.debian.org/security/2017/dsa-3928	vendor-advisory, x_refsource_DEBIAN

Impacted products

Vendor

Product

Version

►

Mozilla

Thunderbird

Version: unspecified < 52.3

	Mozilla	Firefox ESR	Version: unspecified < 52.3
	Mozilla	Firefox	Version: unspecified < 55

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T16:12:28.433Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-19/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-20/"
          },
          {
            "name": "DSA-3968",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2017/dsa-3968"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-18/"
          },
          {
            "name": "RHSA-2017:2456",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2456"
          },
          {
            "name": "100234",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/100234"
          },
          {
            "name": "RHSA-2017:2534",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2534"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1377426"
          },
          {
            "name": "1039124",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1039124"
          },
          {
            "name": "GLSA-201803-14",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201803-14"
          },
          {
            "name": "DSA-3928",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2017/dsa-3928"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "52.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "52.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "55",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "datePublic": "2017-08-08T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "When a page\u0027s content security policy (CSP) header contains a \"sandbox\" directive, other directives are ignored. This results in the incorrect enforcement of CSP. This vulnerability affects Thunderbird \u003c 52.3, Firefox ESR \u003c 52.3, and Firefox \u003c 55."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CSP containing \u0027sandbox\u0027 improperly applied",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-06-12T09:57:01",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-19/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-20/"
        },
        {
          "name": "DSA-3968",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2017/dsa-3968"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-18/"
        },
        {
          "name": "RHSA-2017:2456",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2456"
        },
        {
          "name": "100234",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/100234"
        },
        {
          "name": "RHSA-2017:2534",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2534"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1377426"
        },
        {
          "name": "1039124",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1039124"
        },
        {
          "name": "GLSA-201803-14",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201803-14"
        },
        {
          "name": "DSA-3928",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2017/dsa-3928"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@mozilla.org",
          "ID": "CVE-2017-7803",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Thunderbird",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "52.3"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Firefox ESR",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "52.3"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Firefox",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "55"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Mozilla"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "When a page\u0027s content security policy (CSP) header contains a \"sandbox\" directive, other directives are ignored. This results in the incorrect enforcement of CSP. This vulnerability affects Thunderbird \u003c 52.3, Firefox ESR \u003c 52.3, and Firefox \u003c 55."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CSP containing \u0027sandbox\u0027 improperly applied"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-19/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-19/"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-20/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-20/"
            },
            {
              "name": "DSA-3968",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2017/dsa-3968"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-18/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-18/"
            },
            {
              "name": "RHSA-2017:2456",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2456"
            },
            {
              "name": "100234",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/100234"
            },
            {
              "name": "RHSA-2017:2534",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2534"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1377426",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1377426"
            },
            {
              "name": "1039124",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1039124"
            },
            {
              "name": "GLSA-201803-14",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201803-14"
            },
            {
              "name": "DSA-3928",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2017/dsa-3928"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2017-7803",
    "datePublished": "2018-06-11T21:00:00",
    "dateReserved": "2017-04-12T00:00:00",
    "dateUpdated": "2024-08-05T16:12:28.433Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-7782 (GCVE-0-2017-7782)

Vulnerability from cvelistv5

Published

2018-06-11 21:00

Modified

2024-08-05 16:12

Severity ?

CWE

WindowsDllDetourPatcher allocates memory without DEP protections

Summary

An error in the "WindowsDllDetourPatcher" where a RWX ("Read/Write/Execute") 4k block is allocated but never protected, violating DEP protections. Note: This attack only affects Windows operating systems. Other operating systems are not affected. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55.

References

►

URL

Tags

	https://www.mozilla.org/security/advisories/mfsa2017-19/	x_refsource_CONFIRM
	https://www.mozilla.org/security/advisories/mfsa2017-20/	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/100243	vdb-entry, x_refsource_BID
	https://www.mozilla.org/security/advisories/mfsa2017-18/	x_refsource_CONFIRM
	https://bugzilla.mozilla.org/show_bug.cgi?id=1344034	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1039124	vdb-entry, x_refsource_SECTRACK

Impacted products

Vendor

Product

Version

►

Mozilla

Thunderbird

Version: unspecified < 52.3

	Mozilla	Firefox ESR	Version: unspecified < 52.3
	Mozilla	Firefox	Version: unspecified < 55

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T16:12:28.408Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-19/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-20/"
          },
          {
            "name": "100243",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/100243"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-18/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1344034"
          },
          {
            "name": "1039124",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1039124"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "52.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "52.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "55",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "datePublic": "2017-08-08T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "An error in the \"WindowsDllDetourPatcher\" where a RWX (\"Read/Write/Execute\") 4k block is allocated but never protected, violating DEP protections. Note: This attack only affects Windows operating systems. Other operating systems are not affected. This vulnerability affects Thunderbird \u003c 52.3, Firefox ESR \u003c 52.3, and Firefox \u003c 55."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "WindowsDllDetourPatcher allocates memory without DEP protections",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-06-12T09:57:01",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-19/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-20/"
        },
        {
          "name": "100243",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/100243"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-18/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1344034"
        },
        {
          "name": "1039124",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1039124"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@mozilla.org",
          "ID": "CVE-2017-7782",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Thunderbird",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "52.3"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Firefox ESR",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "52.3"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Firefox",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "55"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Mozilla"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "An error in the \"WindowsDllDetourPatcher\" where a RWX (\"Read/Write/Execute\") 4k block is allocated but never protected, violating DEP protections. Note: This attack only affects Windows operating systems. Other operating systems are not affected. This vulnerability affects Thunderbird \u003c 52.3, Firefox ESR \u003c 52.3, and Firefox \u003c 55."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "WindowsDllDetourPatcher allocates memory without DEP protections"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-19/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-19/"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-20/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-20/"
            },
            {
              "name": "100243",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/100243"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-18/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-18/"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1344034",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1344034"
            },
            {
              "name": "1039124",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1039124"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2017-7782",
    "datePublished": "2018-06-11T21:00:00",
    "dateReserved": "2017-04-12T00:00:00",
    "dateUpdated": "2024-08-05T16:12:28.408Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-7753 (GCVE-0-2017-7753)

Vulnerability from cvelistv5

Published

2018-06-11 21:00

Modified

2024-08-05 16:12

Severity ?

CWE

Out-of-bounds read with cached style data and pseudo-elements

Summary

An out-of-bounds read occurs when applying style rules to pseudo-elements, such as ::first-line, using cached style data. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55.

References

►

URL

Tags

	https://www.mozilla.org/security/advisories/mfsa2017-19/	x_refsource_CONFIRM
	https://www.mozilla.org/security/advisories/mfsa2017-20/	x_refsource_CONFIRM
	https://www.debian.org/security/2017/dsa-3968	vendor-advisory, x_refsource_DEBIAN
	https://www.mozilla.org/security/advisories/mfsa2017-18/	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHSA-2017:2456	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2017:2534	vendor-advisory, x_refsource_REDHAT
	http://www.securityfocus.com/bid/100315	vdb-entry, x_refsource_BID
	https://bugzilla.mozilla.org/show_bug.cgi?id=1353312	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1039124	vdb-entry, x_refsource_SECTRACK
	https://security.gentoo.org/glsa/201803-14	vendor-advisory, x_refsource_GENTOO
	https://www.debian.org/security/2017/dsa-3928	vendor-advisory, x_refsource_DEBIAN

Impacted products

Vendor

Product

Version

►

Mozilla

Thunderbird

Version: unspecified < 52.3

	Mozilla	Firefox ESR	Version: unspecified < 52.3
	Mozilla	Firefox	Version: unspecified < 55

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T16:12:28.382Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-19/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-20/"
          },
          {
            "name": "DSA-3968",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2017/dsa-3968"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-18/"
          },
          {
            "name": "RHSA-2017:2456",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2456"
          },
          {
            "name": "RHSA-2017:2534",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2534"
          },
          {
            "name": "100315",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/100315"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1353312"
          },
          {
            "name": "1039124",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1039124"
          },
          {
            "name": "GLSA-201803-14",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201803-14"
          },
          {
            "name": "DSA-3928",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2017/dsa-3928"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "52.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "52.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "55",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "datePublic": "2017-08-08T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "An out-of-bounds read occurs when applying style rules to pseudo-elements, such as ::first-line, using cached style data. This vulnerability affects Thunderbird \u003c 52.3, Firefox ESR \u003c 52.3, and Firefox \u003c 55."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Out-of-bounds read with cached style data and pseudo-elements",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-06-12T09:57:01",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-19/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-20/"
        },
        {
          "name": "DSA-3968",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2017/dsa-3968"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-18/"
        },
        {
          "name": "RHSA-2017:2456",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2456"
        },
        {
          "name": "RHSA-2017:2534",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2534"
        },
        {
          "name": "100315",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/100315"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1353312"
        },
        {
          "name": "1039124",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1039124"
        },
        {
          "name": "GLSA-201803-14",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201803-14"
        },
        {
          "name": "DSA-3928",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2017/dsa-3928"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@mozilla.org",
          "ID": "CVE-2017-7753",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Thunderbird",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "52.3"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Firefox ESR",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "52.3"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Firefox",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "55"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Mozilla"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "An out-of-bounds read occurs when applying style rules to pseudo-elements, such as ::first-line, using cached style data. This vulnerability affects Thunderbird \u003c 52.3, Firefox ESR \u003c 52.3, and Firefox \u003c 55."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Out-of-bounds read with cached style data and pseudo-elements"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-19/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-19/"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-20/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-20/"
            },
            {
              "name": "DSA-3968",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2017/dsa-3968"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-18/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-18/"
            },
            {
              "name": "RHSA-2017:2456",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2456"
            },
            {
              "name": "RHSA-2017:2534",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2534"
            },
            {
              "name": "100315",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/100315"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1353312",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1353312"
            },
            {
              "name": "1039124",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1039124"
            },
            {
              "name": "GLSA-201803-14",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201803-14"
            },
            {
              "name": "DSA-3928",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2017/dsa-3928"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2017-7753",
    "datePublished": "2018-06-11T21:00:00",
    "dateReserved": "2017-04-12T00:00:00",
    "dateUpdated": "2024-08-05T16:12:28.382Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-7802 (GCVE-0-2017-7802)

Vulnerability from cvelistv5

Published

2018-06-11 21:00

Modified

2024-08-05 16:12

Severity ?

CWE

Use-after-free resizing image elements

Summary

A use-after-free vulnerability can occur when manipulating the DOM during the resize event of an image element. If these elements have been freed due to a lack of strong references, a potentially exploitable crash may occur when the freed elements are accessed. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55.

References

►

URL

Tags

	https://www.mozilla.org/security/advisories/mfsa2017-19/	x_refsource_CONFIRM
	https://bugzilla.mozilla.org/show_bug.cgi?id=1378147	x_refsource_CONFIRM
	https://www.mozilla.org/security/advisories/mfsa2017-20/	x_refsource_CONFIRM
	https://www.debian.org/security/2017/dsa-3968	vendor-advisory, x_refsource_DEBIAN
	https://www.mozilla.org/security/advisories/mfsa2017-18/	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHSA-2017:2456	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2017:2534	vendor-advisory, x_refsource_REDHAT
	http://www.securityfocus.com/bid/100202	vdb-entry, x_refsource_BID
	http://www.securitytracker.com/id/1039124	vdb-entry, x_refsource_SECTRACK
	https://security.gentoo.org/glsa/201803-14	vendor-advisory, x_refsource_GENTOO
	https://www.debian.org/security/2017/dsa-3928	vendor-advisory, x_refsource_DEBIAN

Impacted products

Vendor

Product

Version

►

Mozilla

Thunderbird

Version: unspecified < 52.3

	Mozilla	Firefox ESR	Version: unspecified < 52.3
	Mozilla	Firefox	Version: unspecified < 55

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T16:12:28.392Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-19/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1378147"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-20/"
          },
          {
            "name": "DSA-3968",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2017/dsa-3968"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-18/"
          },
          {
            "name": "RHSA-2017:2456",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2456"
          },
          {
            "name": "RHSA-2017:2534",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2534"
          },
          {
            "name": "100202",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/100202"
          },
          {
            "name": "1039124",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1039124"
          },
          {
            "name": "GLSA-201803-14",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201803-14"
          },
          {
            "name": "DSA-3928",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2017/dsa-3928"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "52.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "52.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "55",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "datePublic": "2017-08-08T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "A use-after-free vulnerability can occur when manipulating the DOM during the resize event of an image element. If these elements have been freed due to a lack of strong references, a potentially exploitable crash may occur when the freed elements are accessed. This vulnerability affects Thunderbird \u003c 52.3, Firefox ESR \u003c 52.3, and Firefox \u003c 55."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Use-after-free resizing image elements",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-06-12T09:57:01",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-19/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1378147"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-20/"
        },
        {
          "name": "DSA-3968",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2017/dsa-3968"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-18/"
        },
        {
          "name": "RHSA-2017:2456",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2456"
        },
        {
          "name": "RHSA-2017:2534",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2534"
        },
        {
          "name": "100202",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/100202"
        },
        {
          "name": "1039124",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1039124"
        },
        {
          "name": "GLSA-201803-14",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201803-14"
        },
        {
          "name": "DSA-3928",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2017/dsa-3928"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@mozilla.org",
          "ID": "CVE-2017-7802",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Thunderbird",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "52.3"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Firefox ESR",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "52.3"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Firefox",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "55"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Mozilla"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A use-after-free vulnerability can occur when manipulating the DOM during the resize event of an image element. If these elements have been freed due to a lack of strong references, a potentially exploitable crash may occur when the freed elements are accessed. This vulnerability affects Thunderbird \u003c 52.3, Firefox ESR \u003c 52.3, and Firefox \u003c 55."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Use-after-free resizing image elements"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-19/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-19/"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1378147",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1378147"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-20/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-20/"
            },
            {
              "name": "DSA-3968",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2017/dsa-3968"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-18/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-18/"
            },
            {
              "name": "RHSA-2017:2456",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2456"
            },
            {
              "name": "RHSA-2017:2534",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2534"
            },
            {
              "name": "100202",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/100202"
            },
            {
              "name": "1039124",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1039124"
            },
            {
              "name": "GLSA-201803-14",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201803-14"
            },
            {
              "name": "DSA-3928",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2017/dsa-3928"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2017-7802",
    "datePublished": "2018-06-11T21:00:00",
    "dateReserved": "2017-04-12T00:00:00",
    "dateUpdated": "2024-08-05T16:12:28.392Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-7804 (GCVE-0-2017-7804)

Vulnerability from cvelistv5

Published

2018-06-11 21:00

Modified

2024-08-05 16:12

Severity ?

CWE

Memory protection bypass through WindowsDllDetourPatcher

Summary

The destructor function for the "WindowsDllDetourPatcher" class can be re-purposed by malicious code in concert with another vulnerability to write arbitrary data to an attacker controlled location in memory. This can be used to bypass existing memory protections in this situation. Note: This attack only affects Windows operating systems. Other operating systems are not affected. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55.

References

►

URL

Tags

	https://www.mozilla.org/security/advisories/mfsa2017-19/	x_refsource_CONFIRM
	https://www.mozilla.org/security/advisories/mfsa2017-20/	x_refsource_CONFIRM
	https://www.mozilla.org/security/advisories/mfsa2017-18/	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/100234	vdb-entry, x_refsource_BID
	http://www.securitytracker.com/id/1039124	vdb-entry, x_refsource_SECTRACK
	https://bugzilla.mozilla.org/show_bug.cgi?id=1372849	x_refsource_CONFIRM

Impacted products

Vendor

Product

Version

►

Mozilla

Thunderbird

Version: unspecified < 52.3

	Mozilla	Firefox ESR	Version: unspecified < 52.3
	Mozilla	Firefox	Version: unspecified < 55

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T16:12:28.400Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-19/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-20/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-18/"
          },
          {
            "name": "100234",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/100234"
          },
          {
            "name": "1039124",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1039124"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1372849"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "52.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "52.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "55",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "datePublic": "2017-08-08T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The destructor function for the \"WindowsDllDetourPatcher\" class can be re-purposed by malicious code in concert with another vulnerability to write arbitrary data to an attacker controlled location in memory. This can be used to bypass existing memory protections in this situation. Note: This attack only affects Windows operating systems. Other operating systems are not affected. This vulnerability affects Thunderbird \u003c 52.3, Firefox ESR \u003c 52.3, and Firefox \u003c 55."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Memory protection bypass through WindowsDllDetourPatcher",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-06-12T09:57:01",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-19/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-20/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-18/"
        },
        {
          "name": "100234",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/100234"
        },
        {
          "name": "1039124",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1039124"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1372849"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@mozilla.org",
          "ID": "CVE-2017-7804",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Thunderbird",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "52.3"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Firefox ESR",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "52.3"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Firefox",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "55"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Mozilla"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The destructor function for the \"WindowsDllDetourPatcher\" class can be re-purposed by malicious code in concert with another vulnerability to write arbitrary data to an attacker controlled location in memory. This can be used to bypass existing memory protections in this situation. Note: This attack only affects Windows operating systems. Other operating systems are not affected. This vulnerability affects Thunderbird \u003c 52.3, Firefox ESR \u003c 52.3, and Firefox \u003c 55."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Memory protection bypass through WindowsDllDetourPatcher"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-19/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-19/"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-20/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-20/"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-18/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-18/"
            },
            {
              "name": "100234",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/100234"
            },
            {
              "name": "1039124",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1039124"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1372849",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1372849"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2017-7804",
    "datePublished": "2018-06-11T21:00:00",
    "dateReserved": "2017-04-12T00:00:00",
    "dateUpdated": "2024-08-05T16:12:28.400Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-7791 (GCVE-0-2017-7791)

Vulnerability from cvelistv5

Published

2018-06-11 21:00

Modified

2024-08-05 16:12

Severity ?

CWE

Spoofing following page navigation with data: protocol and modal alerts

Summary

On pages containing an iframe, the "data:" protocol can be used to create a modal alert that will render over arbitrary domains following page navigation, spoofing of the origin of the modal alert from the iframe content. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55.

References

►

URL

Tags

	https://www.mozilla.org/security/advisories/mfsa2017-19/	x_refsource_CONFIRM
	https://www.mozilla.org/security/advisories/mfsa2017-20/	x_refsource_CONFIRM
	https://bugzilla.mozilla.org/show_bug.cgi?id=1365875	x_refsource_CONFIRM
	https://www.debian.org/security/2017/dsa-3968	vendor-advisory, x_refsource_DEBIAN
	https://www.mozilla.org/security/advisories/mfsa2017-18/	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHSA-2017:2456	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2017:2534	vendor-advisory, x_refsource_REDHAT
	http://www.securityfocus.com/bid/100240	vdb-entry, x_refsource_BID
	http://www.securitytracker.com/id/1039124	vdb-entry, x_refsource_SECTRACK
	https://security.gentoo.org/glsa/201803-14	vendor-advisory, x_refsource_GENTOO
	https://www.debian.org/security/2017/dsa-3928	vendor-advisory, x_refsource_DEBIAN

Impacted products

Vendor

Product

Version

►

Mozilla

Thunderbird

Version: unspecified < 52.3

	Mozilla	Firefox ESR	Version: unspecified < 52.3
	Mozilla	Firefox	Version: unspecified < 55

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T16:12:28.504Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-19/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-20/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1365875"
          },
          {
            "name": "DSA-3968",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2017/dsa-3968"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-18/"
          },
          {
            "name": "RHSA-2017:2456",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2456"
          },
          {
            "name": "RHSA-2017:2534",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2534"
          },
          {
            "name": "100240",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/100240"
          },
          {
            "name": "1039124",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1039124"
          },
          {
            "name": "GLSA-201803-14",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201803-14"
          },
          {
            "name": "DSA-3928",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2017/dsa-3928"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "52.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "52.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "55",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "datePublic": "2017-08-08T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "On pages containing an iframe, the \"data:\" protocol can be used to create a modal alert that will render over arbitrary domains following page navigation, spoofing of the origin of the modal alert from the iframe content. This vulnerability affects Thunderbird \u003c 52.3, Firefox ESR \u003c 52.3, and Firefox \u003c 55."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Spoofing following page navigation with data: protocol and modal alerts",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-06-12T09:57:01",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-19/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-20/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1365875"
        },
        {
          "name": "DSA-3968",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2017/dsa-3968"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-18/"
        },
        {
          "name": "RHSA-2017:2456",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2456"
        },
        {
          "name": "RHSA-2017:2534",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2534"
        },
        {
          "name": "100240",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/100240"
        },
        {
          "name": "1039124",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1039124"
        },
        {
          "name": "GLSA-201803-14",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201803-14"
        },
        {
          "name": "DSA-3928",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2017/dsa-3928"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@mozilla.org",
          "ID": "CVE-2017-7791",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Thunderbird",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "52.3"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Firefox ESR",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "52.3"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Firefox",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "55"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Mozilla"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "On pages containing an iframe, the \"data:\" protocol can be used to create a modal alert that will render over arbitrary domains following page navigation, spoofing of the origin of the modal alert from the iframe content. This vulnerability affects Thunderbird \u003c 52.3, Firefox ESR \u003c 52.3, and Firefox \u003c 55."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Spoofing following page navigation with data: protocol and modal alerts"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-19/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-19/"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-20/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-20/"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1365875",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1365875"
            },
            {
              "name": "DSA-3968",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2017/dsa-3968"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-18/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-18/"
            },
            {
              "name": "RHSA-2017:2456",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2456"
            },
            {
              "name": "RHSA-2017:2534",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2534"
            },
            {
              "name": "100240",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/100240"
            },
            {
              "name": "1039124",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1039124"
            },
            {
              "name": "GLSA-201803-14",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201803-14"
            },
            {
              "name": "DSA-3928",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2017/dsa-3928"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2017-7791",
    "datePublished": "2018-06-11T21:00:00",
    "dateReserved": "2017-04-12T00:00:00",
    "dateUpdated": "2024-08-05T16:12:28.504Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-7786 (GCVE-0-2017-7786)

Vulnerability from cvelistv5

Published

2018-06-11 21:00

Modified

2024-08-05 16:12

Severity ?

CWE

Buffer overflow while painting non-displayable SVG

Summary

A buffer overflow can occur when the image renderer attempts to paint non-displayable SVG elements. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55.

References

►

URL

Tags

	https://www.mozilla.org/security/advisories/mfsa2017-19/	x_refsource_CONFIRM
	https://www.mozilla.org/security/advisories/mfsa2017-20/	x_refsource_CONFIRM
	https://www.debian.org/security/2017/dsa-3968	vendor-advisory, x_refsource_DEBIAN
	https://bugzilla.mozilla.org/show_bug.cgi?id=1365189	x_refsource_CONFIRM
	https://www.mozilla.org/security/advisories/mfsa2017-18/	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHSA-2017:2456	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2017:2534	vendor-advisory, x_refsource_REDHAT
	http://www.securityfocus.com/bid/100206	vdb-entry, x_refsource_BID
	http://www.securitytracker.com/id/1039124	vdb-entry, x_refsource_SECTRACK
	https://security.gentoo.org/glsa/201803-14	vendor-advisory, x_refsource_GENTOO
	https://www.debian.org/security/2017/dsa-3928	vendor-advisory, x_refsource_DEBIAN

Impacted products

Vendor

Product

Version

►

Mozilla

Thunderbird

Version: unspecified < 52.3

	Mozilla	Firefox ESR	Version: unspecified < 52.3
	Mozilla	Firefox	Version: unspecified < 55

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T16:12:28.346Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-19/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-20/"
          },
          {
            "name": "DSA-3968",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2017/dsa-3968"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1365189"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-18/"
          },
          {
            "name": "RHSA-2017:2456",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2456"
          },
          {
            "name": "RHSA-2017:2534",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2534"
          },
          {
            "name": "100206",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/100206"
          },
          {
            "name": "1039124",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1039124"
          },
          {
            "name": "GLSA-201803-14",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201803-14"
          },
          {
            "name": "DSA-3928",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2017/dsa-3928"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "52.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "52.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "55",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "datePublic": "2017-08-08T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "A buffer overflow can occur when the image renderer attempts to paint non-displayable SVG elements. This results in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 52.3, Firefox ESR \u003c 52.3, and Firefox \u003c 55."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Buffer overflow while painting non-displayable SVG",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-06-12T09:57:01",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-19/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-20/"
        },
        {
          "name": "DSA-3968",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2017/dsa-3968"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1365189"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-18/"
        },
        {
          "name": "RHSA-2017:2456",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2456"
        },
        {
          "name": "RHSA-2017:2534",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2534"
        },
        {
          "name": "100206",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/100206"
        },
        {
          "name": "1039124",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1039124"
        },
        {
          "name": "GLSA-201803-14",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201803-14"
        },
        {
          "name": "DSA-3928",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2017/dsa-3928"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@mozilla.org",
          "ID": "CVE-2017-7786",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Thunderbird",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "52.3"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Firefox ESR",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "52.3"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Firefox",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "55"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Mozilla"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A buffer overflow can occur when the image renderer attempts to paint non-displayable SVG elements. This results in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 52.3, Firefox ESR \u003c 52.3, and Firefox \u003c 55."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Buffer overflow while painting non-displayable SVG"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-19/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-19/"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-20/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-20/"
            },
            {
              "name": "DSA-3968",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2017/dsa-3968"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1365189",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1365189"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-18/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-18/"
            },
            {
              "name": "RHSA-2017:2456",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2456"
            },
            {
              "name": "RHSA-2017:2534",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2534"
            },
            {
              "name": "100206",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/100206"
            },
            {
              "name": "1039124",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1039124"
            },
            {
              "name": "GLSA-201803-14",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201803-14"
            },
            {
              "name": "DSA-3928",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2017/dsa-3928"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2017-7786",
    "datePublished": "2018-06-11T21:00:00",
    "dateReserved": "2017-04-12T00:00:00",
    "dateUpdated": "2024-08-05T16:12:28.346Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-7787 (GCVE-0-2017-7787)

Vulnerability from cvelistv5

Published

2018-06-11 21:00

Modified

2024-08-05 16:12

Severity ?

CWE

Same-origin policy bypass with iframes through page reloads

Summary

Same-origin policy protections can be bypassed on pages with embedded iframes during page reloads, allowing the iframes to access content on the top level page, leading to information disclosure. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55.

References

►

URL

Tags

	https://www.mozilla.org/security/advisories/mfsa2017-19/	x_refsource_CONFIRM
	https://www.mozilla.org/security/advisories/mfsa2017-20/	x_refsource_CONFIRM
	https://bugzilla.mozilla.org/show_bug.cgi?id=1322896	x_refsource_CONFIRM
	https://www.debian.org/security/2017/dsa-3968	vendor-advisory, x_refsource_DEBIAN
	https://www.mozilla.org/security/advisories/mfsa2017-18/	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHSA-2017:2456	vendor-advisory, x_refsource_REDHAT
	http://www.securityfocus.com/bid/100234	vdb-entry, x_refsource_BID
	https://access.redhat.com/errata/RHSA-2017:2534	vendor-advisory, x_refsource_REDHAT
	http://www.securitytracker.com/id/1039124	vdb-entry, x_refsource_SECTRACK
	https://security.gentoo.org/glsa/201803-14	vendor-advisory, x_refsource_GENTOO
	https://www.debian.org/security/2017/dsa-3928	vendor-advisory, x_refsource_DEBIAN

Impacted products

Vendor

Product

Version

►

Mozilla

Thunderbird

Version: unspecified < 52.3

	Mozilla	Firefox ESR	Version: unspecified < 52.3
	Mozilla	Firefox	Version: unspecified < 55

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T16:12:28.510Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-19/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-20/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1322896"
          },
          {
            "name": "DSA-3968",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2017/dsa-3968"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-18/"
          },
          {
            "name": "RHSA-2017:2456",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2456"
          },
          {
            "name": "100234",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/100234"
          },
          {
            "name": "RHSA-2017:2534",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2534"
          },
          {
            "name": "1039124",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1039124"
          },
          {
            "name": "GLSA-201803-14",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201803-14"
          },
          {
            "name": "DSA-3928",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2017/dsa-3928"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "52.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "52.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "55",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "datePublic": "2017-08-08T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Same-origin policy protections can be bypassed on pages with embedded iframes during page reloads, allowing the iframes to access content on the top level page, leading to information disclosure. This vulnerability affects Thunderbird \u003c 52.3, Firefox ESR \u003c 52.3, and Firefox \u003c 55."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Same-origin policy bypass with iframes through page reloads",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-06-12T09:57:01",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-19/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-20/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1322896"
        },
        {
          "name": "DSA-3968",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2017/dsa-3968"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-18/"
        },
        {
          "name": "RHSA-2017:2456",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2456"
        },
        {
          "name": "100234",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/100234"
        },
        {
          "name": "RHSA-2017:2534",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2534"
        },
        {
          "name": "1039124",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1039124"
        },
        {
          "name": "GLSA-201803-14",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201803-14"
        },
        {
          "name": "DSA-3928",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2017/dsa-3928"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@mozilla.org",
          "ID": "CVE-2017-7787",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Thunderbird",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "52.3"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Firefox ESR",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "52.3"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Firefox",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "55"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Mozilla"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Same-origin policy protections can be bypassed on pages with embedded iframes during page reloads, allowing the iframes to access content on the top level page, leading to information disclosure. This vulnerability affects Thunderbird \u003c 52.3, Firefox ESR \u003c 52.3, and Firefox \u003c 55."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Same-origin policy bypass with iframes through page reloads"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-19/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-19/"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-20/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-20/"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1322896",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1322896"
            },
            {
              "name": "DSA-3968",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2017/dsa-3968"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-18/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-18/"
            },
            {
              "name": "RHSA-2017:2456",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2456"
            },
            {
              "name": "100234",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/100234"
            },
            {
              "name": "RHSA-2017:2534",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2534"
            },
            {
              "name": "1039124",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1039124"
            },
            {
              "name": "GLSA-201803-14",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201803-14"
            },
            {
              "name": "DSA-3928",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2017/dsa-3928"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2017-7787",
    "datePublished": "2018-06-11T21:00:00",
    "dateReserved": "2017-04-12T00:00:00",
    "dateUpdated": "2024-08-05T16:12:28.510Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-7784 (GCVE-0-2017-7784)

Vulnerability from cvelistv5

Published

2018-06-11 21:00

Modified

2024-08-05 16:12

Severity ?

CWE

Summary

A use-after-free vulnerability can occur when reading an image observer during frame reconstruction after the observer has been freed. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55.

References

►

URL

Tags

	https://www.mozilla.org/security/advisories/mfsa2017-19/	x_refsource_CONFIRM
	https://www.mozilla.org/security/advisories/mfsa2017-20/	x_refsource_CONFIRM
	https://www.debian.org/security/2017/dsa-3968	vendor-advisory, x_refsource_DEBIAN
	https://www.mozilla.org/security/advisories/mfsa2017-18/	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHSA-2017:2456	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2017:2534	vendor-advisory, x_refsource_REDHAT
	http://www.securityfocus.com/bid/100202	vdb-entry, x_refsource_BID
	http://www.securitytracker.com/id/1039124	vdb-entry, x_refsource_SECTRACK
	https://security.gentoo.org/glsa/201803-14	vendor-advisory, x_refsource_GENTOO
	https://bugzilla.mozilla.org/show_bug.cgi?id=1376087	x_refsource_CONFIRM
	https://www.debian.org/security/2017/dsa-3928	vendor-advisory, x_refsource_DEBIAN

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T16:12:28.530Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-19/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-20/"
          },
          {
            "name": "DSA-3968",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2017/dsa-3968"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-18/"
          },
          {
            "name": "RHSA-2017:2456",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2456"
          },
          {
            "name": "RHSA-2017:2534",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2534"
          },
          {
            "name": "100202",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/100202"
          },
          {
            "name": "1039124",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1039124"
          },
          {
            "name": "GLSA-201803-14",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201803-14"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1376087"
          },
          {
            "name": "DSA-3928",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2017/dsa-3928"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2017-08-08T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "A use-after-free vulnerability can occur when reading an image observer during frame reconstruction after the observer has been freed. This results in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 52.3, Firefox ESR \u003c 52.3, and Firefox \u003c 55."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-06-12T09:57:01",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-19/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-20/"
        },
        {
          "name": "DSA-3968",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2017/dsa-3968"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-18/"
        },
        {
          "name": "RHSA-2017:2456",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2456"
        },
        {
          "name": "RHSA-2017:2534",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2534"
        },
        {
          "name": "100202",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/100202"
        },
        {
          "name": "1039124",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1039124"
        },
        {
          "name": "GLSA-201803-14",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201803-14"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1376087"
        },
        {
          "name": "DSA-3928",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2017/dsa-3928"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@mozilla.org",
          "ID": "CVE-2017-7784",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A use-after-free vulnerability can occur when reading an image observer during frame reconstruction after the observer has been freed. This results in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 52.3, Firefox ESR \u003c 52.3, and Firefox \u003c 55."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-19/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-19/"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-20/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-20/"
            },
            {
              "name": "DSA-3968",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2017/dsa-3968"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-18/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-18/"
            },
            {
              "name": "RHSA-2017:2456",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2456"
            },
            {
              "name": "RHSA-2017:2534",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2534"
            },
            {
              "name": "100202",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/100202"
            },
            {
              "name": "1039124",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1039124"
            },
            {
              "name": "GLSA-201803-14",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201803-14"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1376087",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1376087"
            },
            {
              "name": "DSA-3928",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2017/dsa-3928"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2017-7784",
    "datePublished": "2018-06-11T21:00:00",
    "dateReserved": "2017-04-12T00:00:00",
    "dateUpdated": "2024-08-05T16:12:28.530Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-7792 (GCVE-0-2017-7792)

Vulnerability from cvelistv5

Published

2018-06-11 21:00

Modified

2024-08-05 16:12

Severity ?

CWE

Buffer overflow viewing certificates with an extremely long OID

Summary

A buffer overflow will occur when viewing a certificate in the certificate manager if the certificate has an extremely long object identifier (OID). This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55.

References

►

URL

Tags

	https://www.mozilla.org/security/advisories/mfsa2017-19/	x_refsource_CONFIRM
	https://www.mozilla.org/security/advisories/mfsa2017-20/	x_refsource_CONFIRM
	https://bugzilla.mozilla.org/show_bug.cgi?id=1368652	x_refsource_CONFIRM
	https://www.debian.org/security/2017/dsa-3968	vendor-advisory, x_refsource_DEBIAN
	https://www.mozilla.org/security/advisories/mfsa2017-18/	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHSA-2017:2456	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2017:2534	vendor-advisory, x_refsource_REDHAT
	http://www.securityfocus.com/bid/100206	vdb-entry, x_refsource_BID
	http://www.securitytracker.com/id/1039124	vdb-entry, x_refsource_SECTRACK
	https://security.gentoo.org/glsa/201803-14	vendor-advisory, x_refsource_GENTOO
	https://www.debian.org/security/2017/dsa-3928	vendor-advisory, x_refsource_DEBIAN

Impacted products

Vendor

Product

Version

►

Mozilla

Thunderbird

Version: unspecified < 52.3

	Mozilla	Firefox ESR	Version: unspecified < 52.3
	Mozilla	Firefox	Version: unspecified < 55

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T16:12:28.356Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-19/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-20/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1368652"
          },
          {
            "name": "DSA-3968",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2017/dsa-3968"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-18/"
          },
          {
            "name": "RHSA-2017:2456",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2456"
          },
          {
            "name": "RHSA-2017:2534",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2534"
          },
          {
            "name": "100206",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/100206"
          },
          {
            "name": "1039124",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1039124"
          },
          {
            "name": "GLSA-201803-14",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201803-14"
          },
          {
            "name": "DSA-3928",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2017/dsa-3928"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "52.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "52.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "55",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "datePublic": "2017-08-08T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "A buffer overflow will occur when viewing a certificate in the certificate manager if the certificate has an extremely long object identifier (OID). This results in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 52.3, Firefox ESR \u003c 52.3, and Firefox \u003c 55."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Buffer overflow viewing certificates with an extremely long OID",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-06-12T09:57:01",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-19/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-20/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1368652"
        },
        {
          "name": "DSA-3968",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2017/dsa-3968"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-18/"
        },
        {
          "name": "RHSA-2017:2456",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2456"
        },
        {
          "name": "RHSA-2017:2534",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2534"
        },
        {
          "name": "100206",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/100206"
        },
        {
          "name": "1039124",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1039124"
        },
        {
          "name": "GLSA-201803-14",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201803-14"
        },
        {
          "name": "DSA-3928",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2017/dsa-3928"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@mozilla.org",
          "ID": "CVE-2017-7792",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Thunderbird",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "52.3"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Firefox ESR",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "52.3"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Firefox",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "55"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Mozilla"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A buffer overflow will occur when viewing a certificate in the certificate manager if the certificate has an extremely long object identifier (OID). This results in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 52.3, Firefox ESR \u003c 52.3, and Firefox \u003c 55."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Buffer overflow viewing certificates with an extremely long OID"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-19/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-19/"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-20/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-20/"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1368652",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1368652"
            },
            {
              "name": "DSA-3968",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2017/dsa-3968"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-18/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-18/"
            },
            {
              "name": "RHSA-2017:2456",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2456"
            },
            {
              "name": "RHSA-2017:2534",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2534"
            },
            {
              "name": "100206",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/100206"
            },
            {
              "name": "1039124",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1039124"
            },
            {
              "name": "GLSA-201803-14",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201803-14"
            },
            {
              "name": "DSA-3928",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2017/dsa-3928"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2017-7792",
    "datePublished": "2018-06-11T21:00:00",
    "dateReserved": "2017-04-12T00:00:00",
    "dateUpdated": "2024-08-05T16:12:28.356Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Tags

Taxonomy of the tags.

All sightings related to this event Export sightings related to this event

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

suse-su-2017:2302-1

Vulnerability from csaf_suse

CVE-2017-7807 (GCVE-0-2017-7807)

Vulnerability from cvelistv5

CVE-2017-7779 (GCVE-0-2017-7779)

Vulnerability from cvelistv5

CVE-2017-7798 (GCVE-0-2017-7798)

Vulnerability from cvelistv5

CVE-2017-7801 (GCVE-0-2017-7801)

Vulnerability from cvelistv5

CVE-2017-7800 (GCVE-0-2017-7800)

Vulnerability from cvelistv5

CVE-2017-7785 (GCVE-0-2017-7785)

Vulnerability from cvelistv5

CVE-2017-7803 (GCVE-0-2017-7803)

Vulnerability from cvelistv5

CVE-2017-7782 (GCVE-0-2017-7782)

Vulnerability from cvelistv5

CVE-2017-7753 (GCVE-0-2017-7753)

Vulnerability from cvelistv5

CVE-2017-7802 (GCVE-0-2017-7802)

Vulnerability from cvelistv5

CVE-2017-7804 (GCVE-0-2017-7804)

Vulnerability from cvelistv5

CVE-2017-7791 (GCVE-0-2017-7791)

Vulnerability from cvelistv5

CVE-2017-7786 (GCVE-0-2017-7786)

Vulnerability from cvelistv5

CVE-2017-7787 (GCVE-0-2017-7787)

Vulnerability from cvelistv5

CVE-2017-7784 (GCVE-0-2017-7784)

Vulnerability from cvelistv5

CVE-2017-7792 (GCVE-0-2017-7792)

Vulnerability from cvelistv5

Tags

Sightings

Nomenclature