PT-2018-8245 · Mozilla+2 · Firefox+2

Honza Bambas · Published 2017-02-02 · Updated 2024-12-12 · CVE-2017-5392

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Firefox versions prior to 51

Description: The issue arises from weak proxy objects having weak references on multiple threads when they should only have them on one, resulting in incorrect memory usage and corruption. This leads to potentially exploitable crashes. The issue only affects Firefox for Android, with other operating systems not being affected.

Recommendations: For versions prior to 51, update to version 51 or later to resolve the issue.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

ALT-PU-2017-1138

CVE-2017-5392

OPENSUSE-SU-2017_0358-1

OPENSUSE-SU-2024:10600-1

OPENSUSE-SU-2024:14572-1

Affected Products

Alt Linux

Firefox

Suse

References · 1869

• https://osv.dev/vulnerability/openSUSE-SU-2024:14572-1 · Vendor Advisory
• https://mozilla.org/security/advisories/mfsa2017-01 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-5392 · Security Note
• https://osv.dev/vulnerability/CVE-2017-5392 · Vendor Advisory
• https://bugzilla.mozilla.org/show_bug.cgi?id=1293709 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:10600-1 · Vendor Advisory
• https://suse.com/security/cve/CVE-2023-25728 · Note
• https://suse.com/security/cve/CVE-2022-31743 · Note
• https://suse.com/security/cve/CVE-2018-12392 · Note
• https://suse.com/security/cve/CVE-2024-5698 · Note
• https://suse.com/security/cve/CVE-2013-1701 · Note
• https://suse.com/security/cve/CVE-2024-5687 · Note
• https://suse.com/security/cve/CVE-2022-24713 · Note
• https://suse.com/security/cve/CVE-2014-8642 · Note
• https://suse.com/security/cve/CVE-2015-4516 · Note