CVE-2017-7755

The Firefox installer on Windows can be made to load malicious DLL files stored in the same directory as the installer when it is run. This allows privileged execution if the installer is run with elevated privileges. Note: This attack only affects Windows operating systems. Other operating systems are unaffected. This vulnerability affects Firefox < 54, Firefox ESR < 52.2, and Thunderbird < 52.2.

• CWE-426

• http://www.securityfocus.com/bid/99057Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1038689Third Party Advisory, VDB Entry
• https://bugzilla.mozilla.org/show_bug.cgi?id=1361326Issue Tracking, Vendor Advisory
• https://www.mozilla.org/security/advisories/mfsa2017-15/Vendor Advisory
• https://www.mozilla.org/security/advisories/mfsa2017-16/Vendor Advisory
• https://www.mozilla.org/security/advisories/mfsa2017-17/Vendor Advisory
• http://www.securityfocus.com/bid/99057Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1038689Third Party Advisory, VDB Entry
• https://bugzilla.mozilla.org/show_bug.cgi?id=1361326Issue Tracking, Vendor Advisory
• https://www.mozilla.org/security/advisories/mfsa2017-15/Vendor Advisory
• https://www.mozilla.org/security/advisories/mfsa2017-16/Vendor Advisory
• https://www.mozilla.org/security/advisories/mfsa2017-17/Vendor Advisory

Published

Jun 11, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-7749A use-after-free vulnerability when using an incorrect URL d…
• CVE-2017-7750A use-after-free vulnerability during video control operatio…
• CVE-2017-7751A use-after-free vulnerability with content viewer listeners…
• CVE-2017-7752A use-after-free vulnerability during specific user interact…
• CVE-2017-7753An out-of-bounds read occurs when applying style rules to ps…
• CVE-2017-7754An out-of-bounds read in WebGL with a maliciously crafted "I…
• CVE-2017-7756A use-after-free and use-after-scope vulnerability when logg…
• CVE-2017-7757A use-after-free vulnerability in IndexedDB when one of its …
• CVE-2017-7758An out-of-bounds read vulnerability with the Opus encoder wh…
• CVE-2017-7759Android intent URLs given to Firefox for Android can be used…
• CVE-2017-7760The Mozilla Windows updater modifies some files to be update…
• CVE-2017-7761The Mozilla Maintenance Service "helper.exe" application cre…