CVE-2017-5403 When adding a range to an object in the DOM, it is possible to use "addRange" to add the range to an incorrect root object. This triggers a use-after-free, resulting in a potentially exploitable crash...
CriticalCVSS 9.8
EPSS 1.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
When adding a range to an object in the DOM, it is possible to use "addRange" to add the range to an incorrect root object. This triggers a use-after-free, resulting in a potentially exploitable crash. This vulnerability affects Firefox < 52 and Thunderbird < 52.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mozilla Thunderbird | < 52.0 | 52.0 |
| mozilla Firefox | < 52.0 | 52.0 |
| mozilla Firefox | < 52 | 52 |
| mozilla Thunderbird | < 52 | 52 |
References
- 96691 third-party-advisory vdb-entry
- 1037966 third-party-advisory vdb-entry
- bugzilla.mozilla.org issue-tracking vendor-advisory
- www.mozilla.org vendor-advisory
- www.mozilla.org vendor-advisory