PT-2017-17947 · Microsoft+3 · Direct 3D 9+6

Omair · Publicado 2017-12-07 · Atualizado 2024-06-15 · CVE-2017-7845

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Thunderbird versions prior to 52.5.2 Firefox ESR versions prior to 52.5.2 Firefox versions prior to 57.0.2

Description A buffer overflow issue occurs when using Direct 3D 9 with the ANGLE graphics library for WebGL content, resulting in a potentially exploitable crash due to an incorrect value being passed during checks. This issue only affects Windows operating systems.

Recommendations For Thunderbird versions prior to 52.5.2, update to version 52.5.2 or later. For Firefox ESR versions prior to 52.5.2, update to version 52.5.2 or later. For Firefox versions prior to 57.0.2, update to version 57.0.2 or later.

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

ALT-PU-2018-1003

CVE-2017-7845

MGASA-2018-0018

OPENSUSE-SU-2024:10601-1

Produtos afetados

Alt Linux

Angle

Direct 3D 9

Firefox

Firefox Esr

Thunderbird

Windows

Referências · 413

• https://suse.com/security/cve/CVE-2018-5161 · Nota
• https://suse.com/security/cve/CVE-2018-12365 · Nota
• https://suse.com/security/cve/CVE-2020-26956 · Nota
• https://suse.com/security/cve/CVE-2018-12392 · Nota
• https://suse.com/security/cve/CVE-2018-12362 · Nota
• https://suse.com/security/cve/CVE-2019-11743 · Nota
• https://suse.com/security/cve/CVE-2020-35111 · Nota
• https://suse.com/security/cve/CVE-2021-23994 · Nota
• https://suse.com/security/cve/CVE-2021-23978 · Nota
• https://suse.com/security/cve/CVE-2021-29991 · Nota
• https://suse.com/security/cve/CVE-2017-5430 · Nota
• https://suse.com/security/cve/CVE-2019-11698 · Nota
• https://suse.com/security/cve/CVE-2020-6793 · Nota
• https://suse.com/security/cve/CVE-2017-7779 · Nota
• https://suse.com/security/cve/CVE-2020-6807 · Nota