CVE-2017-5399: Buffer Overflow
Mozilla developers and community members Carsten Book, Calixte Denizet, Christian Holler, Andrew McCreight, David Bolter, David Keeler, Jon Coppeard, Tyson Smith, Ronald Crane, Tooru Fujisawa, Ben Kelly, Bob Owen, Jed Davis, Julian Seward, Julian Hector, Philipp, Markus Stange, and André Bargull reported memory safety bugs present in Firefox 51. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code.
Other sources
Memory safety bugs were reported in Firefox 51. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox < 52 and Thunderbird < 52.
Affected Software
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
- CVE-2017-5400
- CVE-2017-5401
- CVE-2017-5402
- CVE-2017-5403
- CVE-2017-5404
- CVE-2017-5406
- CVE-2017-5407
- CVE-2017-5410
- CVE-2017-5411
- CVE-2017-5409
- CVE-2017-5408
- CVE-2017-5412
- CVE-2017-5413
- CVE-2017-5414
- CVE-2017-5415
- CVE-2017-5416
- CVE-2017-5417
- CVE-2017-5425
- CVE-2017-5426
- CVE-2017-5427
- CVE-2017-5418
- CVE-2017-5419
- CVE-2017-5420
- CVE-2017-5405
- CVE-2017-5421
- CVE-2017-5422
- CVE-2017-5399
- CVE-2017-5398
Frequently Asked Questions
What is the severity of CVE-2017-5399?
CVE-2017-5399 is classified as a moderate severity vulnerability affecting certain versions of Mozilla Firefox and Thunderbird.
How do I fix CVE-2017-5399?
To fix CVE-2017-5399, upgrade to a version of Mozilla Firefox or Thunderbird that is 52 or later.
What are the affected versions for CVE-2017-5399?
CVE-2017-5399 affects Mozilla Firefox and Thunderbird versions up to and excluding 52.
What types of products are impacted by CVE-2017-5399?
CVE-2017-5399 impacts Mozilla products, specifically Firefox and Thunderbird.
Who are the contributors that reported CVE-2017-5399?
CVE-2017-5399 was reported by Mozilla developers and community members such as Carsten Book, Christian Holler, and Julian Seward.