CVE-2017-5400: Buffer Overflow
JIT-spray targeting asm.js combined with a heap spray allows for a bypass of ASLR and DEP protections leading to potential memory corruption attacks.
Affected Software
Event History
Parent advisories
This vulnerability appears in the following advisories.
Peer vulnerabilities
Found alongside the following vulnerabilities.
- CVE-2017-5400
- CVE-2017-5401
- CVE-2017-5402
- CVE-2017-5404
- CVE-2017-5407
- CVE-2017-5410
- CVE-2017-5408
- CVE-2017-5405
- CVE-2017-5398
- CVE-2017-5403
- CVE-2017-5406
- CVE-2017-5411
- CVE-2017-5412
- CVE-2017-5413
- CVE-2017-5414
- CVE-2017-5416
- CVE-2017-5425
- CVE-2017-5426
- CVE-2017-5418
- CVE-2017-5419
- CVE-2017-5421
- CVE-2017-5422
- CVE-2017-5399
- CVE-2017-5409
- CVE-2017-5415
- CVE-2017-5417
- CVE-2017-5427
- CVE-2017-5420
Frequently Asked Questions
What is the severity of CVE-2017-5400?
CVE-2017-5400 is classified as a high severity vulnerability due to its potential for memory corruption attacks.
How do I fix CVE-2017-5400?
To fix CVE-2017-5400, you should update affected software, such as Mozilla Firefox or Thunderbird, to the latest recommended version.
Which versions of Firefox are affected by CVE-2017-5400?
CVE-2017-5400 affects Firefox versions up to 52.0 and earlier versions of Firefox ESR prior to 45.8.
Are there any workarounds for CVE-2017-5400?
There are no official workarounds for CVE-2017-5400, and the best mitigation is to apply the software updates.
Is CVE-2017-5400 specific to any operating system?
CVE-2017-5400 impacts multiple operating systems, including various distributions of Linux where affected software is used.