Published: 11/06/2018 Updated: 03/10/2019

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

CVSS v3 Base Score: 5.9 | Impact Score: 3.6 | Exploitability Score: 2.2

VMScore: 383

Vector: AV:N/AC:M/Au:N/C:P/I:N/A:N

An error occurs in the elliptic curve point addition algorithm that uses mixed Jacobian-affine coordinates where it can yield a result "POINT_AT_INFINITY" when it should not. A man-in-the-middle attacker could use this to interfere with a connection, resulting in an attacked party computing an incorrect shared secret. This vulnerability affects Firefox < 55.

Vulnerable Product	Search on Vulmon	Subscribe to Product
mozilla firefox

USN-3391-1 introduced a regression in Firefox ...

This update provides compatible packages for Firefox 55 ...

Firefox could be made to crash or run programs as your login if it opened a malicious website ...

Mozilla Foundation Security Advisory 2017-18 Security vulnerabilities fixed in Firefox 55 Announced August 8, 2017 Impact critical Products Firefox Fixed in Firefox 55 ...

An error occurs in the elliptic curve point addition algorithm that uses mixed Jacobian-affine coordinates where it can yield a result "POINT_AT_INFINITY" when it should not A man-in-the-middle attacker could use this to interfere with a connection, resulting in an attacked party computing an incorrect shared secret This vulnerability affects Fir ...

An elliptic curve point addition error has been found in Firefox < 550 An error occurs in the elliptic curve point addition algorithm that uses mixed Jacobian-affine coordinates where it can yield a result POINT_AT_INFINITY when it should not A man-in-the-middle attacker could use this to interfere with a connection, resulting in an attacked ...

NVD-CWE-noinfo https://www.mozilla.org/security/advisories/mfsa2017-18/https://bugzilla.mozilla.org/show_bug.cgi?id=1352039 http://www.securitytracker.com/id/1039124 http://www.securityfocus.com/bid/100383 https://nvd.nist.gov https://usn.ubuntu.com/3391-3/

CVE-2017-7781

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect