CVE-2017-5392: Buffer Overflow
First published: Tue Jan 24 2017(Updated: )
Weak proxy objects have weak references on multiple threads when they should only have them on one, resulting in incorrect memory usage and corruption, which leads to potentially exploitable crashes. Note: This issue only affects Firefox for Android. Other operating systems are not affected.
Credit: security@mozilla.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Firefox | <51 | 51 |
| Firefox | <51.0 | |
| Android |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Peer vulnerabilities
(Found alongside the following vulnerabilities)
- CVE-2017-5375
- CVE-2017-5376
- CVE-2017-5377
- CVE-2017-5378
- CVE-2017-5379
- CVE-2017-5380
- CVE-2017-5390
- CVE-2017-5389
- CVE-2017-5396
- CVE-2017-5381
- CVE-2017-5382
- CVE-2017-5383
- CVE-2017-5384
- CVE-2017-5385
- CVE-2017-5386
- CVE-2017-5394
- CVE-2017-5391
- CVE-2017-5392
- CVE-2017-5393
- CVE-2017-5395
- CVE-2017-5387
- CVE-2017-5388
- CVE-2017-5374
- CVE-2017-5373
Frequently Asked Questions
What is the severity of CVE-2017-5392?
The severity of CVE-2017-5392 is considered high due to its potential to cause crashes and memory corruption.
How do I fix CVE-2017-5392?
To fix CVE-2017-5392, update Firefox for Android to version 51 or later.
Which versions of Firefox are affected by CVE-2017-5392?
CVE-2017-5392 affects Firefox for Android versions prior to 51.
Does CVE-2017-5392 affect desktop versions of Firefox?
No, CVE-2017-5392 only affects Firefox for Android and does not impact desktop versions.
What kind of issues can CVE-2017-5392 cause in Firefox for Android?
CVE-2017-5392 can lead to incorrect memory usage, potential crashes, and memory corruption.
- agent/type
- agent/first-publish-date
- agent/severity
- agent/references
- agent/weakness
- agent/author
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/event
- agent/trending
- agent/source
- agent/softwarecombine
- agent/tags
- collector/mozilla-advisory
- agent/software-canonical-lookup-request
- source/Mozilla
- agent/software-canonical-lookup
- collector/nvd-index
- vendor/mozilla
- canonical/firefox
- vendor/google
- canonical/android