CVE-2017-5406: Buffer Overflow
Published Mar 7, 2017
·Updated
A segmentation fault can occur in the Skia graphics library during some canvas operations due to issues with mask/clip intersection and empty masks.
Affected Software
4 affected componentsFixes available
Mozilla Firefox<52
52
Mozilla Thunderbird<52
52
Mozilla Firefox<52.0
Mozilla Thunderbird<52.0
Remediation
Patch Available
Event History
Mar 7, 2017
CVE Published
12:00 AM
Jun 11, 2018
CVE Published
via MITRE·09:00 PM
Data Sourced
via MITRE·09:00 PM
DescriptionWeakness
Peer vulnerabilities
Found alongside the following vulnerabilities.
- CVE-2017-5400
- CVE-2017-5401
- CVE-2017-5402
- CVE-2017-5403
- CVE-2017-5404
- CVE-2017-5406
- CVE-2017-5407
- CVE-2017-5410
- CVE-2017-5411
- CVE-2017-5409
- CVE-2017-5408
- CVE-2017-5412
- CVE-2017-5413
- CVE-2017-5414
- CVE-2017-5415
- CVE-2017-5416
- CVE-2017-5417
- CVE-2017-5425
- CVE-2017-5426
- CVE-2017-5427
- CVE-2017-5418
- CVE-2017-5419
- CVE-2017-5420
- CVE-2017-5405
- CVE-2017-5421
- CVE-2017-5422
- CVE-2017-5399
- CVE-2017-5398
Frequently Asked Questions
1
What is the severity of CVE-2017-5406?
CVE-2017-5406 has been classified as a high severity vulnerability due to the potential for a segmentation fault.
2
How do I fix CVE-2017-5406?
To fix CVE-2017-5406, update Mozilla Firefox and Thunderbird to version 52.0 or later.
3
What products are affected by CVE-2017-5406?
CVE-2017-5406 affects Mozilla Firefox and Mozilla Thunderbird versions up to 52.
4
Is CVE-2017-5406 a remote exploitation vulnerability?
CVE-2017-5406 can potentially lead to remote code execution if exploited properly.
5
What types of operations trigger CVE-2017-5406?
CVE-2017-5406 is triggered during specific canvas operations that involve mask/clip intersection and empty masks.