CVE-2017-5470 Memory safety bugs were reported in Firefox 53 and Firefox ESR 52.1. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploite...
CriticalCVSS 9.8
EPSS 2.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Memory safety bugs were reported in Firefox 53 and Firefox ESR 52.1. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox < 54, Firefox ESR < 52.2, and Thunderbird < 52.2.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/firefox-esr(Debian:12) | < 52.2.0esr-1 | 52.2.0esr-1 |
| debian/firefox-esr(Debian:13) | < 52.2.0esr-1 | 52.2.0esr-1 |
| debian/firefox-esr(Debian:14) | < 52.2.0esr-1 | 52.2.0esr-1 |
| debian linux | = 8.0 | No fix listed |
| debian linux | = 9.0 | No fix listed |
| redhat enterprise linux | = 6.0 | No fix listed |
| redhat enterprise linux | = 7.0 | No fix listed |
| redhat enterprise linux desktop | = 6.0 | No fix listed |
| redhat enterprise linux desktop | = 7.0 | No fix listed |
| redhat enterprise linux server | = 6.0 | No fix listed |
| redhat enterprise linux server | = 7.0 | No fix listed |
| redhat enterprise linux server aus | = 7.3 | No fix listed |
| redhat enterprise linux server aus | = 7.4 | No fix listed |
| redhat enterprise linux server eus | = 7.3 | No fix listed |
| redhat enterprise linux server eus | = 7.4 | No fix listed |
| redhat enterprise linux server eus | = 7.5 | No fix listed |
| redhat enterprise linux workstation | = 6.0 | No fix listed |
| redhat enterprise linux workstation | = 7.0 | No fix listed |
| mozilla Firefox | < 54.0 | 54.0 |
| mozilla Firefox | < 52.2.0 | 52.2.0 |
| mozilla Thunderbird | < 52.2.0 | 52.2.0 |
| mozilla Firefox | < 54 | 54 |
| mozilla firefox esr | < 52.2 | 52.2 |
| mozilla Thunderbird | < 52.2 | 52.2 |
References
- Debian Security Tracker CVE-2017-5470 vendor-advisory
- 99041 third-party-advisory vdb-entry
- 1038689 third-party-advisory vdb-entry
- RHSA-2017:1440 third-party-advisory vendor-advisory
- RHSA-2017:1561 third-party-advisory vendor-advisory
- bugzilla.mozilla.org issue-tracking vendor-advisory
- DSA-3881 third-party-advisory vendor-advisory
- DSA-3918 third-party-advisory vendor-advisory
- www.mozilla.org vendor-advisory
- www.mozilla.org vendor-advisory
- www.mozilla.org vendor-advisory