CVE-2017-5378

N/A

Description

Hashed codes of JavaScript objects are shared between pages. This allows for pointer leaks because an object's address can be discovered through hash codes, and also allows for data leakage of an object's content using these hash codes. This vulnerability affects Thunderbird < 45.7, Firefox ESR < 45.7, and Firefox < 51.

CVE Details

CVSS v3.1 ScoreN/A

Published6/11/2018

Last Modified11/25/2025

Sourcenvd

Honeypot Sightings0

Affected Products

debian:debian_linuxmozilla:firefoxmozilla:thunderbirdredhat:enterprise_linuxredhat:enterprise_linux_desktopredhat:enterprise_linux_serverredhat:enterprise_linux_server_ausredhat:enterprise_linux_server_eusredhat:enterprise_linux_workstation

Weaknesses (CWE)

CWE-200

References

http://rhn.redhat.com/errata/RHSA-2017-0190.html(security@mozilla.org)

http://rhn.redhat.com/errata/RHSA-2017-0238.html(security@mozilla.org)

http://www.securityfocus.com/bid/95769(security@mozilla.org)

http://www.securitytracker.com/id/1037693(security@mozilla.org)

https://bugzilla.mozilla.org/show_bug.cgi?id=1312001(security@mozilla.org)

https://bugzilla.mozilla.org/show_bug.cgi?id=1330769(security@mozilla.org)

https://security.gentoo.org/glsa/201702-13(security@mozilla.org)

https://security.gentoo.org/glsa/201702-22(security@mozilla.org)

https://www.debian.org/security/2017/dsa-3771(security@mozilla.org)

https://www.debian.org/security/2017/dsa-3832(security@mozilla.org)

https://www.mozilla.org/security/advisories/mfsa2017-01/(security@mozilla.org)

https://www.mozilla.org/security/advisories/mfsa2017-02/(security@mozilla.org)

https://www.mozilla.org/security/advisories/mfsa2017-03/(security@mozilla.org)

http://rhn.redhat.com/errata/RHSA-2017-0190.html(af854a3a-2127-422b-91ae-364da2661108)

http://rhn.redhat.com/errata/RHSA-2017-0238.html(af854a3a-2127-422b-91ae-364da2661108)

http://www.securityfocus.com/bid/95769(af854a3a-2127-422b-91ae-364da2661108)

http://www.securitytracker.com/id/1037693(af854a3a-2127-422b-91ae-364da2661108)

https://bugzilla.mozilla.org/show_bug.cgi?id=1312001(af854a3a-2127-422b-91ae-364da2661108)

https://bugzilla.mozilla.org/show_bug.cgi?id=1330769(af854a3a-2127-422b-91ae-364da2661108)

https://security.gentoo.org/glsa/201702-13(af854a3a-2127-422b-91ae-364da2661108)

https://security.gentoo.org/glsa/201702-22(af854a3a-2127-422b-91ae-364da2661108)

https://www.debian.org/security/2017/dsa-3771(af854a3a-2127-422b-91ae-364da2661108)

https://www.debian.org/security/2017/dsa-3832(af854a3a-2127-422b-91ae-364da2661108)

https://www.mozilla.org/security/advisories/mfsa2017-01/(af854a3a-2127-422b-91ae-364da2661108)

https://www.mozilla.org/security/advisories/mfsa2017-02/(af854a3a-2127-422b-91ae-364da2661108)

https://www.mozilla.org/security/advisories/mfsa2017-03/(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.