CVE-2017-5411: Use After Free
First published: Tue Mar 07 2017(Updated: )
A use-after-free can occur during buffer storage operations within the ANGLE graphics library, used for WebGL content. The buffer storage can be freed while still in use in some circumstances, leading to a potentially exploitable crash. Note: This issue is in libGLES, which is only in use on Windows. Other operating systems are not affected.
Credit: security@mozilla.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Mozilla Firefox | <52 | 52 |
| <52 | 52 | |
| Mozilla Firefox | <52.0 | |
| Microsoft Windows | ||
| Mozilla Thunderbird | <52.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://bugzilla.mozilla.org/show_bug.cgi?id=1325511
- https://www.mozilla.org/en-US/security/advisories/mfsa2017-05/
- https://www.mozilla.org/en-US/security/advisories/mfsa2017-09/
- http://www.securityfocus.com/bid/96692
- http://www.securitytracker.com/id/1037966
- https://www.mozilla.org/security/advisories/mfsa2017-05/
- https://www.mozilla.org/security/advisories/mfsa2017-09/
Peer vulnerabilities
(Found alongside the following vulnerabilities)
- CVE-2017-5400
- CVE-2017-5401
- CVE-2017-5402
- CVE-2017-5403
- CVE-2017-5404
- CVE-2017-5406
- CVE-2017-5407
- CVE-2017-5410
- CVE-2017-5411
- CVE-2017-5408
- CVE-2017-5412
- CVE-2017-5413
- CVE-2017-5414
- CVE-2017-5416
- CVE-2017-5425
- CVE-2017-5426
- CVE-2017-5418
- CVE-2017-5419
- CVE-2017-5405
- CVE-2017-5421
- CVE-2017-5422
- CVE-2017-5399
- CVE-2017-5398
- CVE-2017-5409
- CVE-2017-5415
- CVE-2017-5417
- CVE-2017-5427
- CVE-2017-5420
- agent/type
- agent/first-publish-date
- agent/last-modified-date
- agent/references
- agent/severity
- agent/author
- agent/softwarecombine
- agent/description
- collector/mozilla-advisory
- source/Mozilla
- agent/software-canonical-lookup
- agent/event
- agent/software-canonical-lookup-request
- agent/weakness
- agent/tags
- collector/nvd-index
- collector/mitre-cve
- source/MITRE
- vendor/mozilla
- canonical/mozilla thunderbird
- canonical/mozilla firefox
- vendor/microsoft
- canonical/microsoft windows