Related Vulnerabilities: CVE-2017-7794  

A security issue has been found in Firefox < 55.0. On Linux systems, if the content process is compromised, the sandbox broker will allow files to be truncated even though the sandbox explicitly only has read access to the local file system and no write permissions.

Severity Medium

Remote No

Type Sandbox escape

Description

A security issue has been found in Firefox < 55.0. On Linux systems, if the content process is compromised, the sandbox broker will allow files to be truncated even though the sandbox explicitly only has read access to the local file system and no write permissions.

AVG-375 firefox 54.0.1-1 55.0-1 Critical Fixed

10 Aug 2017 ASA-201708-3 AVG-375 firefox Critical multiple issues

https://www.mozilla.org/en-US/security/advisories/mfsa2017-18/#CVE-2017-7794
https://bugzilla.mozilla.org/show_bug.cgi?id=1374281