VulnerableCode Vulnerability Details

Staging Environment: Content and features may be unstable or change without notice.

Search for vulnerabilities

Vulnerability details: VCID-4jqv-p541-tfa9

Essentials
Severities (20)
References (60)
Severity details (10)
Exploits (0)
EPSS
History (1)

Vulnerability ID	VCID-4jqv-p541-tfa9
Aliases	CVE-2017-7749
Summary	Multiple vulnerabilities have been found in Mozilla Firefox, the worst of which may allow execution of arbitrary code.
Status	Published
Exploitability	0.5
Weighted Severity	9.0
Risk	4.5
Affected and Fixed Packages	Package Details

Weaknesses (1)

CWE-416

Use After Free

System	Score	Found at
cvssv3	9.8	https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7749.json
epss	0.01874	https://api.first.org/data/v1/epss?cve=CVE-2017-7749
epss	0.01874	https://api.first.org/data/v1/epss?cve=CVE-2017-7749
epss	0.01874	https://api.first.org/data/v1/epss?cve=CVE-2017-7749
epss	0.01874	https://api.first.org/data/v1/epss?cve=CVE-2017-7749
epss	0.01874	https://api.first.org/data/v1/epss?cve=CVE-2017-7749
epss	0.01874	https://api.first.org/data/v1/epss?cve=CVE-2017-7749
epss	0.01874	https://api.first.org/data/v1/epss?cve=CVE-2017-7749
epss	0.01874	https://api.first.org/data/v1/epss?cve=CVE-2017-7749
epss	0.01874	https://api.first.org/data/v1/epss?cve=CVE-2017-7749
epss	0.01874	https://api.first.org/data/v1/epss?cve=CVE-2017-7749
cvssv2	6.8	https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
cvssv3	7.3	https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
cvssv2	7.5	https://nvd.nist.gov/vuln/detail/CVE-2017-7749
cvssv3	9.8	https://nvd.nist.gov/vuln/detail/CVE-2017-7749
archlinux	Critical	https://security.archlinux.org/AVG-302
archlinux	Critical	https://security.archlinux.org/AVG-303
generic_textual	critical	https://www.mozilla.org/en-US/security/advisories/mfsa2017-15
generic_textual	critical	https://www.mozilla.org/en-US/security/advisories/mfsa2017-16
generic_textual	critical	https://www.mozilla.org/en-US/security/advisories/mfsa2017-17

Reference id	Reference type	URL
		https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7749.json
		https://api.first.org/data/v1/epss?cve=CVE-2017-7749
		https://bugzilla.mozilla.org/show_bug.cgi?id=1355039
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5470
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5472
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7749
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7750
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7751
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7752
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7754
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7756
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7757
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7758
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7764
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7771
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7772
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7773
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7774
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7776
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7777
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7778
		https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
		https://www.debian.org/security/2017/dsa-3881
		https://www.debian.org/security/2017/dsa-3918
		https://www.mozilla.org/security/advisories/mfsa2017-15/
		https://www.mozilla.org/security/advisories/mfsa2017-16/
		https://www.mozilla.org/security/advisories/mfsa2017-17/
		http://www.securityfocus.com/bid/99057
		http://www.securitytracker.com/id/1038689
1461253		https://bugzilla.redhat.com/show_bug.cgi?id=1461253
ASA-201706-19		https://security.archlinux.org/ASA-201706-19
ASA-201706-20		https://security.archlinux.org/ASA-201706-20
AVG-302		https://security.archlinux.org/AVG-302
AVG-303		https://security.archlinux.org/AVG-303
cpe:2.3:a:mozilla:firefox::::::::		https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mozilla:firefox::::::::
cpe:2.3:a:mozilla:thunderbird::::::::		https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mozilla:thunderbird::::::::
cpe:2.3:o:debian:debian_linux:8.0:::::::*		https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:8.0:::::::*
cpe:2.3:o:debian:debian_linux:9.0:::::::*		https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:9.0:::::::*
cpe:2.3:o:redhat:enterprise_linux:6.0:::::::*		https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux:6.0:::::::*
cpe:2.3:o:redhat:enterprise_linux:7.0:::::::*		https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux:7.0:::::::*
cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:::::::*		https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:::::::*
cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:::::::*		https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:::::::*
cpe:2.3:o:redhat:enterprise_linux_server:6.0:::::::*		https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_server:6.0:::::::*
cpe:2.3:o:redhat:enterprise_linux_server:7.0:::::::*		https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_server:7.0:::::::*
cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:::::::*		https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:::::::*
cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:::::::*		https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:::::::*
cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3:::::::*		https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3:::::::*
cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:::::::*		https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:::::::*
cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:::::::*		https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:::::::*
cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:::::::*		https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:::::::*
cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:::::::*		https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:::::::*
CVE-2017-7749		https://nvd.nist.gov/vuln/detail/CVE-2017-7749
GLSA-201802-03		https://security.gentoo.org/glsa/201802-03
mfsa2017-15		https://www.mozilla.org/en-US/security/advisories/mfsa2017-15
mfsa2017-16		https://www.mozilla.org/en-US/security/advisories/mfsa2017-16
mfsa2017-17		https://www.mozilla.org/en-US/security/advisories/mfsa2017-17
RHSA-2017:1440		https://access.redhat.com/errata/RHSA-2017:1440
RHSA-2017:1561		https://access.redhat.com/errata/RHSA-2017:1561
USN-3315-1		https://usn.ubuntu.com/3315-1/
USN-3321-1		https://usn.ubuntu.com/3321-1/

No exploits are available.

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Found at https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7749.json

Attack Vector (AV)	Attack Complexity (AC)	Privileges Required (PR)	User Interaction (UI)	Scope (S)	Confidentiality Impact (C)	Integrity Impact (I)	Availability Impact (A)
network adjacent_network local physical	low high	none low high	none required	unchanged changed	high low none	high low none	high low none

Attack Vector (AV)

Attack Complexity (AC)

Privileges Required (PR)

User Interaction (UI)

Scope (S)

Confidentiality Impact (C)

Integrity Impact (I)

Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none

Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P Found at https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml

Exploitability (E)	Access Vector (AV)	Access Complexity (AC)	Authentication (Au)	Confidentiality Impact (C)	Integrity Impact (I)	Availability Impact (A)
high functional unproven proof_of_concept not_defined	local adjacent_network network	high medium low	multiple single none	none partial complete	none partial complete	none partial complete

Exploitability (E)

Access Vector (AV)

Access Complexity (AC)

Authentication (Au)

Confidentiality Impact (C)

Integrity Impact (I)

Availability Impact (A)

high

functional

unproven

proof_of_concept

not_defined

local

adjacent_network

network

high

medium

low

multiple

single

none

partial

complete

none

partial

complete

none

partial

complete

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L Found at https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml

Attack Vector (AV)	Attack Complexity (AC)	Privileges Required (PR)	User Interaction (UI)	Scope (S)	Confidentiality Impact (C)	Integrity Impact (I)	Availability Impact (A)
network adjacent_network local physical	low high	none low high	none required	unchanged changed	high low none	high low none	high low none

Attack Vector (AV)

Attack Complexity (AC)

Privileges Required (PR)

User Interaction (UI)

Scope (S)

Confidentiality Impact (C)

Integrity Impact (I)

Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P Found at https://nvd.nist.gov/vuln/detail/CVE-2017-7749

Exploitability (E)	Access Vector (AV)	Access Complexity (AC)	Authentication (Au)	Confidentiality Impact (C)	Integrity Impact (I)	Availability Impact (A)
high functional unproven proof_of_concept not_defined	local adjacent_network network	high medium low	multiple single none	none partial complete	none partial complete	none partial complete

Exploitability (E)

Access Vector (AV)

Access Complexity (AC)

Authentication (Au)

Confidentiality Impact (C)

Integrity Impact (I)

Availability Impact (A)

high

functional

unproven

proof_of_concept

not_defined

local

adjacent_network

network

high

medium

low

multiple

single

none

partial

complete

none

partial

complete

none

partial

complete

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Found at https://nvd.nist.gov/vuln/detail/CVE-2017-7749

Attack Vector (AV)	Attack Complexity (AC)	Privileges Required (PR)	User Interaction (UI)	Scope (S)	Confidentiality Impact (C)	Integrity Impact (I)	Availability Impact (A)
network adjacent_network local physical	low high	none low high	none required	unchanged changed	high low none	high low none	high low none

Attack Vector (AV)

Attack Complexity (AC)

Privileges Required (PR)

User Interaction (UI)

Scope (S)

Confidentiality Impact (C)

Integrity Impact (I)

Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none

Exploit Prediction Scoring System (EPSS)

Percentile	0.83051
EPSS Score	0.01874
Published At	April 1, 2026, 12:55 p.m.

Date	Actor	Action	Source	VulnerableCode Version
2026-04-01T13:11:55.189926+00:00	Gentoo Importer	Import	https://security.gentoo.org/glsa/201802-03	38.0.0