NetSight
IP …
critical9.8

CVE-2017-5401

A crash triggerable by web content in which an "ErrorResult" references unassigned memory due to a logic error.

Impact

A crash triggerable by web content in which an "ErrorResult" references unassigned memory due to a logic error. The resulting crash may be exploitable. This vulnerability affects Firefox < 52, Firefox ESR < 45.8, Thunderbird < 52, and Thunderbird < 45.8.

Affected products

VendorProductAffected versions
DebianDebian Linux
Version 9.0
RedhatEnterprise Linux
Versions 5.0, 6.0, 7.0
RedhatEnterprise Linux Desktop
Versions 5.0, 6.0, 7.0
RedhatEnterprise Linux Server
Versions 5.0, 6.0, 7.0
RedhatEnterprise Linux Server Aus
Versions 7.3, 7.4
RedhatEnterprise Linux Server Eus
Versions 7.3, 7.4, 7.5
RedhatEnterprise Linux Workstation
Versions 5.0, 6.0, 7.0
MozillaThunderbird
before 45.8.0
MozillaFirefox
before 52.0
before 45.8.0

Weakness classification

CWE-388

References