CVE-2017-5403: Use After Free
When adding a range to an object in the DOM, it is possible to use addRange to add the range to an incorrect root object. This triggers a use-after-free, resulting in a potentially exploitable crash.
Other sources
When adding a range to an object in the DOM, it is possible to use "addRange" to add the range to an incorrect root object. This triggers a use-after-free, resulting in a potentially exploitable crash. This vulnerability affects Firefox < 52 and Thunderbird < 52.
Affected Software
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
- CVE-2017-5400
- CVE-2017-5401
- CVE-2017-5402
- CVE-2017-5403
- CVE-2017-5404
- CVE-2017-5406
- CVE-2017-5407
- CVE-2017-5410
- CVE-2017-5411
- CVE-2017-5409
- CVE-2017-5408
- CVE-2017-5412
- CVE-2017-5413
- CVE-2017-5414
- CVE-2017-5415
- CVE-2017-5416
- CVE-2017-5417
- CVE-2017-5425
- CVE-2017-5426
- CVE-2017-5427
- CVE-2017-5418
- CVE-2017-5419
- CVE-2017-5420
- CVE-2017-5405
- CVE-2017-5421
- CVE-2017-5422
- CVE-2017-5399
- CVE-2017-5398
Frequently Asked Questions
What is the severity of CVE-2017-5403?
CVE-2017-5403 has a severity rating classified as medium due to the potential for crashes and possible exploitation.
How do I fix CVE-2017-5403?
To fix CVE-2017-5403, ensure that you update to the latest version of Mozilla Firefox or Mozilla Thunderbird beyond version 52.
What are the products affected by CVE-2017-5403?
CVE-2017-5403 affects Mozilla Firefox and Mozilla Thunderbird versions up to but not including version 52.
Can CVE-2017-5403 be exploited remotely?
CVE-2017-5403 poses risks that could potentially be exploited remotely due to its nature of affecting web applications.
What happens if CVE-2017-5403 is not addressed?
If CVE-2017-5403 is not addressed, users may experience crashes and may be vulnerable to potential exploit scenarios.