CVE-2017-7755

CVE-2017-7755 describes a DLL hijacking vulnerability in the Firefox installer on Windows, affecting Firefox versions prior to 54, Firefox ESR prior to 52.2, and Thunderbird prior to 52.2. An attacker can place a malicious DLL in the same directory as the installer, which will then be loaded and executed when the installer is run, potentially leading to privileged execution if the installer is launched with elevated rights. This vulnerability has a CVSS score of 7.8 (High), indicating a local attack vector with low complexity, requiring user interaction, and potentially leading to high impact on confidentiality, integrity, and availability. While there is no evidence of active exploitation, no public exploit code (Metasploit, Nuclei, ExploitDB), and it is not on the CISA KEV list, it has received some community discussion and media coverage.