Main Vulnerability Database Vulnerabilities #VU6347

Memory corruption in Firefox ESR and Mozilla Firefox - CVE-2017-5429

Published: April 19, 2017

Vulnerability identifier: #VU6347

CSH Severity: High

CVSS v4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2017-5429

CWE-ID: CWE-416

Exploitation vector: Remote access

Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to memory corruption errors. A remote attacker can execute arbitrary code on the target system.

Successful exploitation of the vulnerability may allow an attacker to compromise vulnerable system.

Firefox ESR
Mozilla Firefox
Arch Linux
Gentoo Linux
Red Hat Enterprise Linux for x86_64
SUSE Linux
Ubuntu
Mozilla Thunderbird

Update to Firefox 53, Firefox ESR 45.9 or Firefox ESR 52.1.