CVE-2017-7804
The destructor function for the "WindowsDllDetourPatcher" class can be re-purposed by malicious code in concert with another vulnerability to write arbitrary data to an attacker controlled location in memory. This can be used to bypass existing memory protections in this situation. Note: This attack only affects Windows operating systems. Other operating systems are not affected. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55.
Published:Jun 11, 2018
Last Modified:Nov 25, 2025
EPS:Jun 11, 2018
EPSS Score:0.00689
CVSS Score:7.5
Affected Products
Vendor
Product
Action
Vendor
Microsoft
Product
Windows
Microsoft
Windows
Vendor
Mozilla
Product
Firefox
Mozilla
Firefox
Vendor
Mozilla
Product
Thunderbird
Mozilla
Thunderbird
Exploits
No exploit reference
Common Weakness Enumeration
Common Attack Pattern Enumeration and Classification (CAPEC)
Related CVEs
References
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
