PT-2017-16463 · Mozilla+5 · Firefox Esr+7

Nicolas Grégoire

·

Publicado

2017-01-25

·

Atualizado

2024-12-12

·

CVE-2017-5376

CVSS v3.1

9.8

Crítica

VetorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Firefox versions prior to 51 Firefox ESR versions prior to 45.7 Thunderbird versions prior to 45.7
Description The issue is related to a use-after-free error that occurs when manipulating XSL in XSLT documents.
Recommendations For Firefox versions prior to 51, update to version 51 or later. For Firefox ESR versions prior to 45.7, update to version 45.7 or later. For Thunderbird versions prior to 45.7, update to version 45.7 or later.

Correção

Use After Free

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

ALT-PU-2017-1089
ALT-PU-2017-1138
ALT-PU-2017-1578
CESA-2017_0190
CESA-2017_0238
CVE-2017-5376
DLA-800-1
DLA-896-1
DSA-3771-1
DSA-3832-1
MGASA-2017-0023
MGASA-2017-0039
MGASA-2017-0323
OPENSUSE-SU-2017:0354-1
OPENSUSE-SU-2017:0357-1
OPENSUSE-SU-2017_0358-1
OPENSUSE-SU-2024:10600-1
OPENSUSE-SU-2024:10601-1
OPENSUSE-SU-2024:14572-1
RHSA-2017:0190
RHSA-2017:0238
RHSA-2017_0190
RHSA-2017_0238
SUSE-SU-2017:0426-1
SUSE-SU-2017:0427-1
USN-3165-1
USN-3175-1
USN-3175-2

Produtos afetados

Alt Linux
Centos
Firefox
Firefox Esr
Red Hat
Suse
Thunderbird
Ubuntu