CVE-2017-5428: Integer Overflow
An integer overflow in "createImageBitmap()" was reported through the Pwn2Own contest. The fix for this vulnerability disables the experimental extensions to the "createImageBitmap" API. This function runs in the content sandbox, requiring a second vulnerability to compromise a user's computer. This vulnerability affects Firefox ESR < 52.0.1 and Firefox < 52.0.1.
Other sources
An integer overflow in createImageBitmap() was reported through the Pwn2Own contest. The fix for this vulnerability disables the experimental extensions to the createImageBitmap API. This function runs in the content sandbox, requiring a second vulnerability to compromise a user's computer.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2017-5428?
CVE-2017-5428 has a moderate severity level due to the potential for exploitation through a second vulnerability.
How does CVE-2017-5428 affect web applications?
CVE-2017-5428 affects web applications that utilize the 'createImageBitmap()' API, allowing for potential integer overflow vulnerabilities.
How do I fix CVE-2017-5428?
To fix CVE-2017-5428, upgrade to the latest version of Mozilla Firefox or Firefox ESR beyond 52.0.1.
What versions of Firefox are affected by CVE-2017-5428?
CVE-2017-5428 affects Mozilla Firefox and Firefox ESR versions up to and including 52.0.1.
Is CVE-2017-5428 exploitable remotely?
CVE-2017-5428 is not directly exploitable remotely, as it requires a secondary vulnerability to compromise a user's system.