CVE-2017-5404: Use After Free
A use-after-free error can occur when manipulating ranges in selections with one node inside a native anonymous tree and one node outside of it. This results in a potentially exploitable crash.
Affected Software
Remediation
Patch Available
Event History
Parent advisories
This vulnerability appears in the following advisories.
Peer vulnerabilities
Found alongside the following vulnerabilities.
- CVE-2017-5400
- CVE-2017-5401
- CVE-2017-5402
- CVE-2017-5404
- CVE-2017-5407
- CVE-2017-5410
- CVE-2017-5408
- CVE-2017-5405
- CVE-2017-5398
- CVE-2017-5403
- CVE-2017-5406
- CVE-2017-5411
- CVE-2017-5412
- CVE-2017-5413
- CVE-2017-5414
- CVE-2017-5416
- CVE-2017-5425
- CVE-2017-5426
- CVE-2017-5418
- CVE-2017-5419
- CVE-2017-5421
- CVE-2017-5422
- CVE-2017-5399
- CVE-2017-5409
- CVE-2017-5415
- CVE-2017-5417
- CVE-2017-5427
- CVE-2017-5420
Frequently Asked Questions
What is the severity of CVE-2017-5404?
CVE-2017-5404 has a medium severity rating due to its potential to cause crashes.
How do I fix CVE-2017-5404?
To fix CVE-2017-5404, update Mozilla Thunderbird to version 45.8 or later, or update Firefox to the specified secure versions.
Which software versions are affected by CVE-2017-5404?
CVE-2017-5404 affects Mozilla Thunderbird versions up to 45.8, and certain versions of Firefox and Firefox ESR.
Can exploiting CVE-2017-5404 lead to vulnerabilities in other software?
Exploiting CVE-2017-5404 could potentially allow attackers to cause application crashes and may lead to further attacks.
What types of systems are impacted by CVE-2017-5404?
CVE-2017-5404 impacts systems running vulnerable versions of Mozilla Thunderbird, Firefox, and Firefox ESR on various operating systems.