PT-2017-4023 · Mozilla+2 · Firefox+2
Abhishek Arya
·
Publicado
2017-07-24
·
Atualizado
2024-12-12
·
CVE-2017-7813
CVSS v2.0
8.5
Alta
| Vetor | AV:N/AC:L/Au:N/C:P/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
Mozilla Firefox versions prior to 56
Description
The issue is related to a JavaScript parser vulnerability in Mozilla Firefox, which involves reading data beyond buffer boundaries in memory. This can potentially allow a remote attacker to gain unauthorized access to protected information or cause a denial of service. The vulnerability usually results in a non-exploitable crash but can leak a limited amount of information from memory if it matches JavaScript identifier syntax.
Recommendations
For versions prior to 56, update to version 56 or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive information until the update is applied.
Exploit
Correção
Out of bounds Read
Incorrect Type Conversion or Cast
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Alt Linux
Firefox
Ubuntu