CVE-2017-5403

N/A

Descricao

When adding a range to an object in the DOM, it is possible to use "addRange" to add the range to an incorrect root object. This triggers a use-after-free, resulting in a potentially exploitable crash. This vulnerability affects Firefox < 52 and Thunderbird < 52.

Detalhes CVE

Pontuacao CVSS v3.1N/A

Publicado6/11/2018

Ultima modificacao11/21/2024

Fontenvd

Avistamentos honeypot0

Produtos afetados

mozilla:firefoxmozilla:thunderbird

Fraquezas (CWE)

CWE-416

Referencias

http://www.securityfocus.com/bid/96691(security@mozilla.org)

http://www.securitytracker.com/id/1037966(security@mozilla.org)

https://bugzilla.mozilla.org/show_bug.cgi?id=1340186(security@mozilla.org)

https://www.mozilla.org/security/advisories/mfsa2017-05/(security@mozilla.org)

https://www.mozilla.org/security/advisories/mfsa2017-09/(security@mozilla.org)

http://www.securityfocus.com/bid/96691(af854a3a-2127-422b-91ae-364da2661108)

http://www.securitytracker.com/id/1037966(af854a3a-2127-422b-91ae-364da2661108)

https://bugzilla.mozilla.org/show_bug.cgi?id=1340186(af854a3a-2127-422b-91ae-364da2661108)

https://www.mozilla.org/security/advisories/mfsa2017-05/(af854a3a-2127-422b-91ae-364da2661108)

https://www.mozilla.org/security/advisories/mfsa2017-09/(af854a3a-2127-422b-91ae-364da2661108)

Correlacoes IOC

Sem correlacoes registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.