CVE-2017-5455

CVE-2017-5455: falha em Mozilla Firefox

Publicada em 11 jun 2018 · Atualizada em 05 ago 2024

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

3Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackepss 3.4%

The internal feed reader APIs that crossed the sandbox barrier allowed for a sandbox escape and escalation of privilege if combined with another vulnerability that resulted in remote code execution inside the sandboxed process. This vulnerability affects Firefox ESR < 52.1 and Firefox < 53.

Produtos afetados

Mozilla · Firefox Mozilla · Firefox ESR

CVEs relacionadas — Mozilla Firefox

No mesmo produto, das mais perigosas para as menos.

CVE-2016-9079HIGHCVE-2016-9079EPSS 87.4%KEV CVE-2019-11708CRITICALCVE-2019-11708EPSS 55.9%KEV CVE-2019-17026HIGHCVE-2019-17026EPSS 46.3%KEV CVE-2019-11707HIGHCVE-2019-11707EPSS 38.0%KEV CVE-2024-9680CRITICALCVE-2024-9680EPSS 23.2%KEV CVE-2022-26485HIGHCVE-2022-26485EPSS 14.3%KEV

Referências

https://access.redhat.com/errata/RHSA-2017:1106 https://bugzilla.mozilla.org/show_bug.cgi?id=1341191 https://www.mozilla.org/security/advisories/mfsa2017-10/https://www.mozilla.org/security/advisories/mfsa2017-12/http://www.securityfocus.com/bid/97940 http://www.securitytracker.com/id/1038320