NetSight
IP …
critical9.8Public exploit code

CVE-2017-5375

JIT code allocation can allow for a bypass of ASLR and DEP protections leading to potential memory corruption attacks.

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

JIT code allocation can allow for a bypass of ASLR and DEP protections leading to potential memory corruption attacks. This vulnerability affects Thunderbird < 45.7, Firefox ESR < 45.7, and Firefox < 51.

Affected products

VendorProductAffected versions
RedhatEnterprise Linux Desktop
Versions 5.0, 6.0, 7.0
RedhatEnterprise Linux Server
Versions 5.0, 6.0, 7.0
RedhatEnterprise Linux Workstation
Versions 5.0, 6.0, 7.0
MozillaFirefox
before 45.7.0
before 51.0.1
MozillaThunderbird
before 45.7.0
DebianDebian Linux
Version 8.0

Weakness classification

CWE-119

References