CVE catalog

CVE-2017-7831

UBUNTU-CVE-2017-7831

[CVE catalog]

Severity
Medium · CVSS 5.3CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Published
Updated
Source
[NVD] · [CVE record]
EPSS
1.56% · Oct 25, 2026

A vulnerability where the security wrapper does not deny access to some exposed properties using the deprecated "_exposedProps_" mechanism on proxy objects. These properties should be explicitly unavailable to proxy objects. This vulnerability affects Firefox < 57.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Ubuntufirefox14.0424.0+build1-0ubuntu1vulnerable
Ubuntufirefox14.0425.0+build3-0ubuntu0.13.10.1vulnerable
Ubuntufirefox14.0428.0~b2+build1-0ubuntu2vulnerable
Ubuntufirefox14.0428.0+build1-0ubuntu1vulnerable
Ubuntufirefox14.0428.0+build2-0ubuntu1vulnerable
Ubuntufirefox14.0428.0+build2-0ubuntu2vulnerable
Ubuntufirefox14.0429.0+build1-0ubuntu0.14.04.2vulnerable
Ubuntufirefox14.0430.0+build1-0ubuntu0.14.04.3vulnerable
Ubuntufirefox14.0431.0+build1-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0432.0+build1-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0432.0.3+build1-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0433.0+build2-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0434.0+build2-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0435.0+build3-0ubuntu0.14.04.2vulnerable
Ubuntufirefox14.0435.0.1+build1-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0436.0+build2-0ubuntu0.14.04.4vulnerable
Ubuntufirefox14.0436.0.1+build2-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0436.0.4+build1-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0437.0+build2-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0437.0.1+build1-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0437.0.2+build1-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0438.0+build3-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0439.0+build5-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0439.0.3+build2-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0440.0+build4-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0440.0+build4-0ubuntu0.14.04.4vulnerable
Ubuntufirefox14.0440.0.3+build1-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0441.0+build3-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0441.0.1+build2-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0441.0.2+build2-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0442.0+build2-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0443.0+build1-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0443.0.4+build3-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0444.0+build3-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0444.0.1+build2-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0444.0.2+build1-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0445.0+build2-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0445.0.1+build1-0ubuntu0.14.04.2vulnerable
Ubuntufirefox14.0445.0.2+build1-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0446.0+build5-0ubuntu0.14.04.2vulnerable
Ubuntufirefox14.0446.0.1+build1-0ubuntu0.14.04.3vulnerable
Ubuntufirefox14.0447.0+build3-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0448.0+build2-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0449.0+build4-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0449.0.2+build2-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0450.0+build2-0ubuntu0.14.04.2vulnerable
Ubuntufirefox14.0450.0.2+build1-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0450.1.0+build2-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0451.0.1+build2-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0451.0.1+build2-0ubuntu0.14.04.2vulnerable
Ubuntufirefox14.0452.0+build2-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0452.0.1+build2-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0452.0.2+build1-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0453.0+build6-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0453.0.2+build1-0ubuntu0.14.04.2vulnerable
Ubuntufirefox14.0453.0.3+build1-0ubuntu0.14.04.2vulnerable
Ubuntufirefox14.0454.0+build3-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0455.0.1+build2-0ubuntu0.14.04.2vulnerable
Ubuntufirefox14.0455.0.2+build1-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0456.0+build6-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0456.0+build6-0ubuntu0.14.04.2vulnerable
Ubuntufirefox14.0457.0+build4-0ubuntu0.14.04.4fixed
Ubuntufirefox16.0441.0.2+build2-0ubuntu1vulnerable
Ubuntufirefox16.0442.0+build2-0ubuntu1vulnerable
Ubuntufirefox16.0444.0+build3-0ubuntu2vulnerable
Ubuntufirefox16.0444.0.1+build1-0ubuntu1vulnerable
Ubuntufirefox16.0444.0.2+build1-0ubuntu1vulnerable
Ubuntufirefox16.0445.0+build2-0ubuntu1vulnerable
Ubuntufirefox16.0445.0.1+build1-0ubuntu1vulnerable
Ubuntufirefox16.0445.0.2+build1-0ubuntu1vulnerable
Ubuntufirefox16.0446.0+build5-0ubuntu0.16.04.2vulnerable
Ubuntufirefox16.0446.0.1+build1-0ubuntu0.16.04.2vulnerable
Ubuntufirefox16.0447.0+build3-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0448.0+build2-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0449.0+build4-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0449.0.2+build2-0ubuntu0.16.04.2vulnerable
Ubuntufirefox16.0450.0+build2-0ubuntu0.16.04.2vulnerable
Ubuntufirefox16.0450.0.2+build1-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0450.1.0+build2-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0451.0.1+build2-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0451.0.1+build2-0ubuntu0.16.04.2vulnerable
Ubuntufirefox16.0452.0+build2-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0452.0.1+build2-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0452.0.2+build1-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0453.0+build6-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0453.0.2+build1-0ubuntu0.16.04.2vulnerable
Ubuntufirefox16.0453.0.3+build1-0ubuntu0.16.04.2vulnerable
Ubuntufirefox16.0454.0+build3-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0455.0.1+build2-0ubuntu0.16.04.2vulnerable
Ubuntufirefox16.0455.0.2+build1-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0456.0+build6-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0456.0+build6-0ubuntu0.16.04.2vulnerable
Ubuntufirefox16.0457.0+build4-0ubuntu0.16.04.5fixed
Ubuntufirefox18.0456.0+build6-0ubuntu1vulnerable
Ubuntufirefox18.0457.0.1+build2-0ubuntu1fixed
Ubuntumozjs5218.0452.3.1-0ubuntu3vulnerable
Ubuntumozjs5218.0452.3.1-7fakesync1vulnerable
Ubuntumozjs5218.0452.8.1-0ubuntu0.18.04.1vulnerable
Ubuntumozjs5218.0452.9.1-0ubuntu0.18.04.1vulnerable
Ubuntumozjs3818.0438.8.0~repack1-0ubuntu1vulnerable
Ubuntumozjs3818.0438.8.0~repack1-0ubuntu3vulnerable
Ubuntumozjs3818.0438.8.0~repack1-0ubuntu4vulnerable
Ubuntumozjs5220.0452.9.1-1build1vulnerable
Ubuntumozjs5220.0452.9.1-1ubuntu3vulnerable

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Ubuntufirefoxdeb14.0457.0+build4-0ubuntu0.14.04.4Not reportedUBUNTU-CVE-2017-7831Not reported
Ubuntufirefoxdeb16.0457.0+build4-0ubuntu0.16.04.5Not reportedUBUNTU-CVE-2017-7831Not reported
Ubuntufirefoxdeb18.0457.0.1+build2-0ubuntu1Not reportedUBUNTU-CVE-2017-7831Not reported

OpenFactory catalog packages

No matching packages in this catalog.

Observed:

References