CVE-2017-5378: vulnerability in Mozilla Thunderbird
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 3.3%
Hashed codes of JavaScript objects are shared between pages. This allows for pointer leaks because an object's address can be discovered through hash codes, and also allows for data leakage of an object's content using these hash codes. This vulnerability affects Thunderbird < 45.7, Firefox ESR < 45.7, and Firefox < 51.
Related CVEs — Mozilla Thunderbird
In the same product, most dangerous first.
References
http://rhn.redhat.com/errata/RHSA-2017-0190.htmlhttp://rhn.redhat.com/errata/RHSA-2017-0238.htmlhttps://bugzilla.mozilla.org/show_bug.cgi?id=1312001https://bugzilla.mozilla.org/show_bug.cgi?id=1330769https://security.gentoo.org/glsa/201702-13https://security.gentoo.org/glsa/201702-22https://www.debian.org/security/2017/dsa-3771https://www.debian.org/security/2017/dsa-3832https://www.mozilla.org/security/advisories/mfsa2017-01/https://www.mozilla.org/security/advisories/mfsa2017-02/https://www.mozilla.org/security/advisories/mfsa2017-03/http://www.securityfocus.com/bid/95769