CVE-2017-5464
CVE-2017-5464
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 2.6%KEV nãoPoC —Nuclei —Metasploit —Patch referenciado
Lifecycle
11 Jun 2018Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
During DOM manipulations of the accessibility tree through script, the DOM tree can become out of sync with the accessibility tree, leading to memory corruption and a potentially exploitable crash. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45.9, Firefox ESR < 52.1, and Firefox < 53.
Want to know if your infrastructure is exposed to this?
Talk to TrueHacking →References
https://access.redhat.com/errata/RHSA-2017:1104https://access.redhat.com/errata/RHSA-2017:1106https://access.redhat.com/errata/RHSA-2017:1201https://bugzilla.mozilla.org/show_bug.cgi?id=1347075https://www.debian.org/security/2017/dsa-3831https://www.mozilla.org/security/advisories/mfsa2017-10/https://www.mozilla.org/security/advisories/mfsa2017-11/https://www.mozilla.org/security/advisories/mfsa2017-12/https://www.mozilla.org/security/advisories/mfsa2017-13/http://www.securityfocus.com/bid/97940http://www.securitytracker.com/id/1038320