PT-2017-3989 · Mozilla+5 · Firefox Esr+7

Nils

·

Publicado

2017-10-27

·

Atualizado

2024-12-12

·

CVE-2017-7828

CVSS v2.0

10

Crítica

VetorAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Firefox versions prior to 57 Firefox ESR versions prior to 52.5 Thunderbird versions prior to 52.5
Description A use-after-free issue occurs due to the PressShell object being freed while still in use, potentially leading to a crash during flushing and resizing layout operations. This can result in a denial of service.
Recommendations For Firefox versions prior to 57, update to version 57 or later. For Firefox ESR versions prior to 52.5, update to version 52.5 or later. For Thunderbird versions prior to 52.5, update to version 52.5 or later.

Correção

Use After Free

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-416

Identificadores relacionados

ALT-PU-2017-2652
ALT-PU-2017-2703
ALT-PU-2017-2739
ALT-PU-2018-1854
BDU:2021-00024
CESA-2017_3247
CESA-2017_3372
CVE-2017-7828
DLA-1172-1
DLA-1199-1
DSA-4035-1
DSA-4061-1
DSA-4075-1
MGASA-2017-0418
MGASA-2017-0432
MGASA-2018-0018
OPENSUSE-SU-2017:3108-1
OPENSUSE-SU-2017:3110-1
OPENSUSE-SU-2017_3027-1
OPENSUSE-SU-2024:10600-1
OPENSUSE-SU-2024:10601-1
OPENSUSE-SU-2024:14572-1
RHSA-2017:3247
RHSA-2017:3372
RHSA-2017_3247
RHSA-2017_3372
SUSE-SU-2017:3213-1
SUSE-SU-2017:3233-1
USN-3477-1
USN-3477-2
USN-3477-3
USN-3477-4
USN-3490-1

Produtos afetados

Alt Linux
Centos
Firefox
Firefox Esr
Red Hat
Suse
Thunderbird
Ubuntu