CVE-2017-5375: Buffer Overflow
JIT code allocation can allow for a bypass of ASLR and DEP protections leading to potential memory corruption attacks.
Affected Software
Event History
Parent advisories
This vulnerability appears in the following advisories.
Peer vulnerabilities
Found alongside the following vulnerabilities.
- CVE-2017-5375
- CVE-2017-5376
- CVE-2017-5378
- CVE-2017-5380
- CVE-2017-5390
- CVE-2017-5396
- CVE-2017-5383
- CVE-2017-5373
- CVE-2017-5377
- CVE-2017-5379
- CVE-2017-5389
- CVE-2017-5381
- CVE-2017-5382
- CVE-2017-5384
- CVE-2017-5385
- CVE-2017-5386
- CVE-2017-5394
- CVE-2017-5391
- CVE-2017-5392
- CVE-2017-5393
- CVE-2017-5395
- CVE-2017-5387
- CVE-2017-5388
- CVE-2017-5374
Frequently Asked Questions
What is the severity of CVE-2017-5375?
CVE-2017-5375 has a moderate severity rating due to the potential for memory corruption attacks.
How do I fix CVE-2017-5375?
To fix CVE-2017-5375, users should upgrade to Mozilla Firefox ESR versions 45.7 or later, or the latest versions of Firefox and Thunderbird.
Which versions are affected by CVE-2017-5375?
CVE-2017-5375 affects Thunderbird versions prior to 45.7, Firefox ESR versions prior to 45.7, and Firefox versions prior to 51.
What protections are bypassed by CVE-2017-5375?
CVE-2017-5375 allows for a bypass of Address Space Layout Randomization (ASLR) and Data Execution Prevention (DEP) protections.
What type of attacks can result from CVE-2017-5375?
CVE-2017-5375 can lead to potential memory corruption attacks which may be exploited by malicious actors.