CVE-2017-5401
3Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 3.0%
probabilidade de exploração
3.0%top 13% das CVEs
exploração observada
nãonenhuma fonte reporta
A crash triggerable by web content in which an "ErrorResult" references unassigned memory due to a logic error. The resulting crash may be exploitable. This vulnerability affects Firefox < 52, Firefox ESR < 45.8, Thunderbird < 52, and Thunderbird < 45.8.
Referências
http://rhn.redhat.com/errata/RHSA-2017-0459.htmlhttp://rhn.redhat.com/errata/RHSA-2017-0461.htmlhttp://rhn.redhat.com/errata/RHSA-2017-0498.htmlhttps://bugzilla.mozilla.org/show_bug.cgi?id=1328861https://security.gentoo.org/glsa/201705-06https://security.gentoo.org/glsa/201705-07https://www.debian.org/security/2017/dsa-3805https://www.debian.org/security/2017/dsa-3832https://www.mozilla.org/security/advisories/mfsa2017-05/https://www.mozilla.org/security/advisories/mfsa2017-06/https://www.mozilla.org/security/advisories/mfsa2017-07/https://www.mozilla.org/security/advisories/mfsa2017-09/