PT-2017-17947 · Microsoft+3 · Direct 3D 9+6

Omair · Published 2017-12-07 · Updated 2024-06-15 · CVE-2017-7845

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Thunderbird versions prior to 52.5.2 Firefox ESR versions prior to 52.5.2 Firefox versions prior to 57.0.2

Description A buffer overflow issue occurs when using Direct 3D 9 with the ANGLE graphics library for WebGL content, resulting in a potentially exploitable crash due to an incorrect value being passed during checks. This issue only affects Windows operating systems.

Recommendations For Thunderbird versions prior to 52.5.2, update to version 52.5.2 or later. For Firefox ESR versions prior to 52.5.2, update to version 52.5.2 or later. For Firefox versions prior to 57.0.2, update to version 57.0.2 or later.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

ALT-PU-2018-1003

CVE-2017-7845

MGASA-2018-0018

OPENSUSE-SU-2024:10601-1

Affected Products

Alt Linux

Angle

Direct 3D 9

Firefox

Firefox Esr

Thunderbird

Windows

References · 413

• https://advisories.mageia.org/MGASA-2018-0018.html · Security Note
• https://osv.dev/vulnerability/CVE-2017-7845 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2018-0018 · Vendor Advisory
• https://mozilla.org/en-US/security/advisories/mfsa2017-22 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-7845 · Security Note
• https://mozilla.org/en-US/security/advisories/mfsa2017-19 · Vendor Advisory
• https://mozilla.org/en-US/security/advisories/mfsa2017-16 · Vendor Advisory
• https://mozilla.org/en-US/security/advisories/mfsa2017-28 · Vendor Advisory
• https://mozilla.org/security/advisories/mfsa2017-30 · Vendor Advisory
• https://mozilla.org/en-US/security/advisories/mfsa2017-25 · Vendor Advisory
• https://mozilla.org/en-US/security/advisories/mfsa2017-12 · Vendor Advisory
• https://mozilla.org/security/advisories/mfsa2017-29 · Vendor Advisory
• https://mozilla.org/security/advisories/mfsa2017-28 · Vendor Advisory
• https://mozilla.org/en-US/security/advisories/mfsa2017-05 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:10601-1 · Vendor Advisory