CVE-2017-5443: Critical severity Mozilla Thunderbird vulnerability
An out-of-bounds write vulnerability while decoding improperly formed BinHex format archives.
Affected Software
Remediation
Patch Available
Event History
Parent advisories
This vulnerability appears in the following advisories.
Peer vulnerabilities
Found alongside the following vulnerabilities.
- CVE-2017-5433
- CVE-2017-5435
- CVE-2017-5436
- CVE-2017-5461
- CVE-2017-5459
- CVE-2017-5466
- CVE-2017-5434
- CVE-2017-5432
- CVE-2017-5460
- CVE-2017-5438
- CVE-2017-5439
- CVE-2017-5440
- CVE-2017-5441
- CVE-2017-5442
- CVE-2017-5464
- CVE-2017-5443
- CVE-2017-5444
- CVE-2017-5446
- CVE-2017-5447
- CVE-2017-5465
- CVE-2016-10196
- CVE-2017-5454
- CVE-2017-5469
- CVE-2017-5445
- CVE-2017-5449
- CVE-2017-5451
- CVE-2017-5462
- CVE-2017-5467
- CVE-2017-5430
- CVE-2017-5429
- CVE-2017-5448
- CVE-2017-5455
- CVE-2017-5456
- CVE-2017-5450
- CVE-2017-5463
- CVE-2017-5452
- CVE-2017-5453
- CVE-2017-5458
- CVE-2017-5468
Frequently Asked Questions
What is the severity of CVE-2017-5443?
CVE-2017-5443 has a high severity rating due to the potential for exploitation leading to out-of-bounds writes.
How do I fix CVE-2017-5443?
To fix CVE-2017-5443, update your affected software to the latest versions provided by Mozilla or your OS vendor.
Which software is affected by CVE-2017-5443?
CVE-2017-5443 affects Mozilla Thunderbird, Mozilla Firefox newer than version 52.1, and various versions of Firefox ESR.
What types of attacks can exploit CVE-2017-5443?
CVE-2017-5443 can be exploited through specially crafted BinHex format archives that lead to memory corruption.
Is CVE-2017-5443 still a threat if I have updated my software?
If you have updated your software to versions that are not vulnerable, the threat from CVE-2017-5443 should be mitigated.