First published: Tue Mar 07 2017(Updated: )
A use-after-free can occur during buffer storage operations within the ANGLE graphics library, used for WebGL content. The buffer storage can be freed while still in use in some circumstances, leading to a potentially exploitable crash. Note: This issue is in libGLES, which is only in use on Windows. Other operating systems are not affected.
Credit: security@mozilla.org
Affected Software | Affected Version | How to fix |
---|---|---|
Firefox | <52 | 52 |
Firefox | <52.0 | |
Microsoft Windows | ||
Thunderbird | <52.0 | |
Thunderbird | <52 | 52 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
(Found alongside the following vulnerabilities)
CVE-2017-5411 has been classified as a high severity vulnerability due to its potential to lead to exploitable crashes.
To fix CVE-2017-5411, users should upgrade to Firefox or Thunderbird version 52 or later.
CVE-2017-5411 affects Mozilla Firefox and Mozilla Thunderbird versions prior to 52.
CVE-2017-5411 is a use-after-free vulnerability that occurs during buffer storage operations within the ANGLE graphics library.
CVE-2017-5411 primarily affects software running on the Windows operating system.