CVE-2017-5377: Buffer Overflow
Published Jan 24, 2017
·Updated
A memory corruption vulnerability in Skia that can occur when using transforms to make gradients, resulting in a potentially exploitable crash.
Affected Software
2 affected componentsFixes available
Mozilla Firefox<51
51
Mozilla Firefox<51.0
Event History
Jan 24, 2017
CVE Published
12:00 AM
Jun 11, 2018
CVE Published
via MITRE·09:00 PM
Data Sourced
via MITRE·09:00 PM
DescriptionWeakness
Peer vulnerabilities
Found alongside the following vulnerabilities.
- CVE-2017-5375
- CVE-2017-5376
- CVE-2017-5377
- CVE-2017-5378
- CVE-2017-5379
- CVE-2017-5380
- CVE-2017-5390
- CVE-2017-5389
- CVE-2017-5396
- CVE-2017-5381
- CVE-2017-5382
- CVE-2017-5383
- CVE-2017-5384
- CVE-2017-5385
- CVE-2017-5386
- CVE-2017-5394
- CVE-2017-5391
- CVE-2017-5392
- CVE-2017-5393
- CVE-2017-5395
- CVE-2017-5387
- CVE-2017-5388
- CVE-2017-5374
- CVE-2017-5373
Frequently Asked Questions
1
What is the severity of CVE-2017-5377?
CVE-2017-5377 is classified as a high-severity vulnerability due to its potential to cause memory corruption leading to crashes.
2
How do I fix CVE-2017-5377?
To fix CVE-2017-5377, update to Mozilla Firefox version 51 or later, as earlier versions are affected.
3
What versions of Firefox are affected by CVE-2017-5377?
CVE-2017-5377 affects all versions of Mozilla Firefox prior to version 51.
4
What impact does CVE-2017-5377 have on users?
CVE-2017-5377 can lead to application crashes and potential exploitation through memory corruption.
5
Is CVE-2017-5377 a remote code execution vulnerability?
CVE-2017-5377 is not specifically a remote code execution vulnerability, but it can lead to crashes that may be exploitable.