CVE-2017-5428

EPSS 2.8%

Vexday Risk Score

3Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS —EPSS 2.8%KEV nãoPoC —Nuclei —Metasploit —Patch referenciado

Lifecycle

11 Jun 2018Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

An integer overflow in "createImageBitmap()" was reported through the Pwn2Own contest. The fix for this vulnerability disables the experimental extensions to the "createImageBitmap" API. This function runs in the content sandbox, requiring a second vulnerability to compromise a user's computer. This vulnerability affects Firefox ESR < 52.0.1 and Firefox < 52.0.1.

Affected products

Mozilla · Firefox Mozilla · Firefox ESR

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://rhn.redhat.com/errata/RHSA-2017-0558.html https://bugzilla.mozilla.org/show_bug.cgi?id=1348168 https://www.mozilla.org/security/advisories/mfsa2017-08/http://www.securityfocus.com/bid/96959 http://www.securitytracker.com/id/1038060