PT-2017-16460 · Mozilla+5 · Firefox Esr+7

André Bargull

+5

·

Publicado

2017-01-25

·

Atualizado

2024-12-12

·

CVE-2017-5373

CVSS v3.1

9.8

Crítica

VetorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Firefox versions 50.1 and earlier Firefox ESR versions 45.6 and earlier Thunderbird versions prior to 45.7
Description Memory safety bugs were reported, showing evidence of memory corruption. It is presumed that with enough effort, some of these bugs could be exploited to run arbitrary code.
Recommendations For Firefox versions 50.1 and earlier, update to version 51 or later. For Firefox ESR versions 45.6 and earlier, update to version 45.7 or later. For Thunderbird versions prior to 45.7, update to version 45.7 or later.

Correção

Buffer Overflow

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

ALT-PU-2017-1089
ALT-PU-2017-1138
ALT-PU-2017-1578
CESA-2017_0190
CESA-2017_0238
CVE-2017-5373
DLA-800-1
DLA-896-1
DSA-3771-1
DSA-3832-1
MGASA-2017-0023
MGASA-2017-0039
MGASA-2017-0323
OPENSUSE-SU-2017:0354-1
OPENSUSE-SU-2017:0357-1
OPENSUSE-SU-2017_0358-1
OPENSUSE-SU-2024:10600-1
OPENSUSE-SU-2024:10601-1
OPENSUSE-SU-2024:14572-1
RHSA-2017:0190
RHSA-2017:0238
RHSA-2017_0190
RHSA-2017_0238
SUSE-SU-2017:0426-1
SUSE-SU-2017:0427-1
SUSE-SU-2017_0426-1
SUSE-SU-2017_0427-1
USN-3165-1
USN-3175-1
USN-3175-2

Produtos afetados

Alt Linux
Centos
Firefox
Firefox Esr
Red Hat
Suse
Thunderbird
Ubuntu