vulnwire
7.5high

CVE-2017-7765

The "Mark of the Web" was not correctly saved on Windows when files with very long names were downloaded from the Internet.

Published 8 y ago · modified 4 mo ago · JSON

CVSS
7.5
v3.0 · NVD
CISA KEV
No
not known exploited
EPSS
1.3%
percentile 71%
Public exploits
0
none known

The "Mark of the Web" was not correctly saved on Windows when files with very long names were downloaded from the Internet. Without the Mark of the Web data, the security warning that Windows displays before running executables downloaded from the Internet is not shown. Note: This attack only affects Windows operating systems. Other operating systems are unaffected. This vulnerability affects Firefox < 54, Firefox ESR < 52.2, and Thunderbird < 52.2.

Exploit prediction (EPSS)

1.33% probability of exploitation in the next 30 days, higher than 71% of all scored CVEs.

CVSS scores

Assigned byVersionScoreVector
NVD3.07.5CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
NVD2.05.0AV:N/AC:L/Au:N/C:N/I:P/A:N

Affected products

  • Mozilla Firefox
  • Mozilla Firefox ESR
  • Mozilla Thunderbird

Classification

Weakness
  • CWE-20 Improper Input Validation

References

  • securityfocus.com /bid/99057 · vdb-entry, x_refsource_BID, x_transferred
  • mozilla.org /security/advisories/mfsa2017-15/ · x_refsource_CONFIRM, x_transferred
  • securitytracker.com /id/1038689 · vdb-entry, x_refsource_SECTRACK, x_transferred
  • bugzilla.mozilla.org /show_bug.cgi?id=1273265 · x_refsource_CONFIRM, x_transferred
  • mozilla.org /security/advisories/mfsa2017-17/ · x_refsource_CONFIRM, x_transferred
  • mozilla.org /security/advisories/mfsa2017-16/ · x_refsource_CONFIRM, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.