CVE-2017-5442: Use After Free
Published Apr 19, 2017
·Updated
A use-after-free vulnerability during changes in style when manipulating DOM elements. This results in a potentially exploitable crash.
Affected Software
26 affected componentsFixes available
Mozilla Thunderbird<52.1
52.1
Mozilla Firefox<53
53
Mozilla Firefox ESR<52.1
52.1
Mozilla Firefox ESR<45.9
45.9
Debian Debian Linux=9.0
redhat Enterprise Linux=6.0
redhat Enterprise Linux=7.0
redhat Enterprise Linux Desktop=6.0
redhat Enterprise Linux Desktop=7.0
redhat Enterprise Linux Server=6.0
redhat Enterprise Linux Server=7.0
redhat Enterprise Linux Server Aus=7.3
redhat Enterprise Linux Server Aus=7.4
redhat Enterprise Linux Server Eus=7.3
redhat Enterprise Linux Server Eus=7.4
redhat Enterprise Linux Server Eus=7.5
redhat Enterprise Linux Workstation=6.0
redhat Enterprise Linux Workstation=7.0
Mozilla Firefox<53.0
Mozilla Firefox=52.0
Mozilla Firefox ESR<45.9.0
Mozilla Thunderbird<52.1.0
Mozilla Firefox ESR=52.0
debian/firefox
137.0.2-1
debian/firefox-esr
115.14.0esr-1~deb11u1128.9.0esr-1~deb11u1128.8.0esr-1~deb12u1128.9.0esr-1~deb12u1128.9.0esr-2
Mozilla Firefox<45.9.0
Remediation
Patch Available
Event History
Apr 19, 2017
CVE Published
via Mozilla·12:00 AM
Data Sourced
via Red Hat·05:34 AM
DescriptionSeverityAffected Software
Jun 11, 2018
CVE Published
via MITRE·09:00 PM
Data Sourced
via MITRE·09:00 PM
DescriptionWeakness
Data Sourced
via NVD·09:29 PM
RemedyDescriptionSeverityWeaknessAffected Software
Jan 11, 2024
Data Sourced
via Launchpad·10:38 PM
Description
Sep 16, 2024
Data Sourced
via Ubuntu·01:47 AM
RemedyDescriptionSeverityAffected Software
Parent advisories
This vulnerability appears in the following advisories.
Peer vulnerabilities
Found alongside the following vulnerabilities.
- CVE-2017-5433
- CVE-2017-5435
- CVE-2017-5436
- CVE-2017-5461
- CVE-2017-5459
- CVE-2017-5466
- CVE-2017-5434
- CVE-2017-5432
- CVE-2017-5460
- CVE-2017-5438
- CVE-2017-5439
- CVE-2017-5440
- CVE-2017-5441
- CVE-2017-5442
- CVE-2017-5464
- CVE-2017-5443
- CVE-2017-5444
- CVE-2017-5446
- CVE-2017-5447
- CVE-2017-5465
- CVE-2016-10196
- CVE-2017-5454
- CVE-2017-5469
- CVE-2017-5445
- CVE-2017-5449
- CVE-2017-5451
- CVE-2017-5462
- CVE-2017-5467
- CVE-2017-5430
- CVE-2017-5429
- CVE-2017-5448
- CVE-2017-5455
- CVE-2017-5456
- CVE-2017-5450
- CVE-2017-5463
- CVE-2017-5452
- CVE-2017-5453
- CVE-2017-5458
- CVE-2017-5468
Frequently Asked Questions
1
What is the severity of CVE-2017-5442?
CVE-2017-5442 is classified as a moderate severity vulnerability.
2
How do I fix CVE-2017-5442?
To fix CVE-2017-5442, update Mozilla Thunderbird to version 52.1 or later, or update Firefox ESR to version 52.1 or later.
3
Which software is affected by CVE-2017-5442?
CVE-2017-5442 affects Mozilla Thunderbird versions before 52.1 and Firefox ESR versions before 52.1.
4
Can CVE-2017-5442 lead to remote code execution?
No, CVE-2017-5442 is a use-after-free vulnerability that can lead to crashes but not remote code execution.
5
Are there any known exploits for CVE-2017-5442?
As of now, there are no publicly known exploits specifically targeting CVE-2017-5442.