CVE-2017-5378: Infoleak
Hashed codes of JavaScript objects are shared between pages. This allows for pointer leaks because an object's address can be discovered through hash codes, and also allows for data leakage of an object's content using these hash codes. This vulnerability affects Thunderbird < 45.7, Firefox ESR < 45.7, and Firefox < 51.
Other sources
Hashed codes of JavaScript objects are shared between pages. This allows for pointer leaks because an object’s address can be discovered through hash codes, and also allows for data leakage of an object’s content using these hash codes.
Affected Software
Remediation
Patch Available
Event History
Parent advisories
This vulnerability appears in the following advisories.
Peer vulnerabilities
Found alongside the following vulnerabilities.
- CVE-2017-5375
- CVE-2017-5376
- CVE-2017-5378
- CVE-2017-5380
- CVE-2017-5390
- CVE-2017-5396
- CVE-2017-5383
- CVE-2017-5373
- CVE-2017-5377
- CVE-2017-5379
- CVE-2017-5389
- CVE-2017-5381
- CVE-2017-5382
- CVE-2017-5384
- CVE-2017-5385
- CVE-2017-5386
- CVE-2017-5394
- CVE-2017-5391
- CVE-2017-5392
- CVE-2017-5393
- CVE-2017-5395
- CVE-2017-5387
- CVE-2017-5388
- CVE-2017-5374
Frequently Asked Questions
What is the severity of CVE-2017-5378?
CVE-2017-5378 is considered a moderate vulnerability due to potential data leakage from shared JavaScript object hashes.
How do I fix CVE-2017-5378?
To resolve CVE-2017-5378, update Mozilla Firefox and Thunderbird to at least version 45.7.
What software is affected by CVE-2017-5378?
CVE-2017-5378 affects Mozilla Firefox versions earlier than 45.7 and Thunderbird versions earlier than 45.7.
Can CVE-2017-5378 lead to data leakage?
Yes, CVE-2017-5378 may allow for data leakage due to the shared hash codes between JavaScript objects.
Is CVE-2017-5378 a critical vulnerability?
CVE-2017-5378 is not classified as critical but poses significant risk due to its ability to leak sensitive information.