CVE-2017-5398 Memory safety bugs were reported in Thunderbird 45.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitr...
CriticalCVSS 9.8
EPSS 3.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Memory safety bugs were reported in Thunderbird 45.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox < 52, Firefox ESR < 45.8, Thunderbird < 52, and Thunderbird < 45.8.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/firefox-esr(Debian:12) | < 45.8.0esr-1 | 45.8.0esr-1 |
| debian/firefox-esr(Debian:13) | < 45.8.0esr-1 | 45.8.0esr-1 |
| debian/firefox-esr(Debian:14) | < 45.8.0esr-1 | 45.8.0esr-1 |
| debian linux | = 8.0 | No fix listed |
| debian linux | = 9.0 | No fix listed |
| redhat enterprise linux desktop | = 5.0 | No fix listed |
| redhat enterprise linux desktop | = 6.0 | No fix listed |
| redhat enterprise linux desktop | = 7.0 | No fix listed |
| redhat enterprise linux server | = 5.0 | No fix listed |
| redhat enterprise linux server | = 6.0 | No fix listed |
| redhat enterprise linux server | = 7.0 | No fix listed |
| redhat enterprise linux server aus | = 7.3 | No fix listed |
| redhat enterprise linux server aus | = 7.4 | No fix listed |
| redhat enterprise linux server eus | = 7.3 | No fix listed |
| redhat enterprise linux server eus | = 7.4 | No fix listed |
| redhat enterprise linux server eus | = 7.5 | No fix listed |
| redhat enterprise linux workstation | = 5.0 | No fix listed |
| redhat enterprise linux workstation | = 6.0 | No fix listed |
| redhat enterprise linux workstation | = 7.0 | No fix listed |
| mozilla Firefox | < 52.0 | 52.0 |
| mozilla Firefox | < 45.8.0 | 45.8.0 |
| mozilla Thunderbird | < 52.0 | 52.0 |
| mozilla thunderbird esr | < 45.8.0 | 45.8.0 |
| mozilla Firefox | < 52 | 52 |
| mozilla firefox esr | < 45.8 | 45.8 |
Show 2 more
| Product | Affected versions | Fixed in |
|---|---|---|
| mozilla Thunderbird | < 52 | 52 |
| mozilla Thunderbird | < 45.8 | 45.8 |
References
- Debian Security Tracker CVE-2017-5398 vendor-advisory
- RHSA-2017:0459 third-party-advisory vendor-advisory
- RHSA-2017:0461 third-party-advisory vendor-advisory
- RHSA-2017:0498 third-party-advisory vendor-advisory
- 96651 third-party-advisory vdb-entry
- 1037966 third-party-advisory vdb-entry
- bugzilla.mozilla.org issue-tracking permissions-required third-party-advisory
- GLSA-201705-06 third-party-advisory vendor-advisory
- GLSA-201705-07 third-party-advisory vendor-advisory
- DSA-3805 third-party-advisory vendor-advisory
- DSA-3832 third-party-advisory vendor-advisory
- www.mozilla.org vendor-advisory
- www.mozilla.org vendor-advisory
- www.mozilla.org vendor-advisory
- www.mozilla.org vendor-advisory