Vulnerability in Mozilla Firefox
CVE-2017-5375
JIT code allocation can allow for a bypass of ASLR and DEP protections leading to potential memory corruption attacks. This vulnerability affects Thunderbird < 45.7, Firefox ESR < 45.7, and Firefox < 51.
EPSS: 0.584 (98.2th percentile) — read the EPSS interpretation.
Affected products
- Mozilla Firefox — versions unspecified
- Mozilla Firefox Esr — versions unspecified
- Mozilla Thunderbird — versions unspecified
Public proof-of-concept exploits
References
- www.mozilla.org/security/advisories/mfsa2017-03/ (x_refsource_CONFIRM)
- www.mozilla.org/security/advisories/mfsa2017-02/ (x_refsource_CONFIRM)
- GLSA-201702-22 (vendor-advisory, x_refsource_GENTOO)
- 42327 (exploit, x_refsource_EXPLOIT-DB)
- DSA-3832 (vendor-advisory, x_refsource_DEBIAN)
- 44293 (exploit, x_refsource_EXPLOIT-DB)
- GLSA-201702-13 (vendor-advisory, x_refsource_GENTOO)
- DSA-3771 (vendor-advisory, x_refsource_DEBIAN)
- 44294 (exploit, x_refsource_EXPLOIT-DB)
- 1037693 (vdb-entry, x_refsource_SECTRACK)
Frequently asked questions
- What is CVE-2017-5375?
- CVE-2017-5375 is a vulnerability in Mozilla Firefox. Published 2018-06-11.
- Is CVE-2017-5375 known to be exploited?
- 4 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.