CVE-2017-5428 An integer overflow in "createImageBitmap()" was reported through the Pwn2Own contest. The fix for this vulnerability disables the experimental extensions to the "createImageBitmap" API. This function...
CriticalCVSS 9.8
EPSS 3.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
An integer overflow in "createImageBitmap()" was reported through the Pwn2Own contest. The fix for this vulnerability disables the experimental extensions to the "createImageBitmap" API. This function runs in the content sandbox, requiring a second vulnerability to compromise a user's computer. This vulnerability affects Firefox ESR < 52.0.1 and Firefox < 52.0.1.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| redhat enterprise linux | = 7.0 | No fix listed |
| redhat enterprise linux desktop | = 7.0 | No fix listed |
| redhat enterprise linux server | = 7.0 | No fix listed |
| redhat enterprise linux server aus | = 7.3 | No fix listed |
| redhat enterprise linux server aus | = 7.4 | No fix listed |
| redhat enterprise linux server eus | = 7.3 | No fix listed |
| redhat enterprise linux server eus | = 7.4 | No fix listed |
| redhat enterprise linux server eus | = 7.5 | No fix listed |
| redhat enterprise linux workstation | = 7.0 | No fix listed |
| mozilla Firefox | < 52.0.1 | 52.0.1 |
| mozilla firefox esr | < 52.0.1 | 52.0.1 |
References
- RHSA-2017:0558 third-party-advisory vendor-advisory
- 96959 third-party-advisory vdb-entry
- 1038060 third-party-advisory vdb-entry
- bugzilla.mozilla.org exploit issue-tracking patch vendor-advisory
- www.mozilla.org vendor-advisory
- Debian Security Tracker CVE-2017-5428 vendor-advisory