CVE-2017-7794

Source
Severity Medium
Remote No
Type Sandbox escape
Description
A security issue has been found in Firefox < 55.0. On Linux systems, if the content process is compromised, the sandbox broker will allow files to be truncated even though the sandbox explicitly only has read access to the local file system and no write permissions.
Group Package Affected Fixed Severity Status Ticket
AVG-375 firefox 54.0.1-1 55.0-1 Critical Fixed
Date Advisory Group Package Severity Description
10 Aug 2017 ASA-201708-3 AVG-375 firefox Critical multiple issues
References
https://www.mozilla.org/en-US/security/advisories/mfsa2017-18/#CVE-2017-7794
https://bugzilla.mozilla.org/show_bug.cgi?id=1374281