CVE-2017-7765

CVE-2017-7765 describes a vulnerability in Firefox and Thunderbird on Windows where the "Mark of the Web" security feature was not correctly applied to downloaded files with very long names. This omission allowed executables downloaded from the internet to bypass the standard Windows security warning, potentially leading to the execution of malicious code. The vulnerability has a CVSS score of 7.5 (High), indicating a network-exploitable flaw with low attack complexity and high integrity impact, as it could lead to unauthorized system modification. While the EPSS and FAUCET scores are relatively low, suggesting limited real-world exploitation, there is no public exploit code available (Metasploit, Nuclei, ExploitDB), and it is not listed in CISA's KEV catalog. Community discussion and media coverage are minimal, with only one article mentioning the Firefox release that patched this issue.