CVE-2017-5400 PUBLISHED

JIT-spray targeting asm.js combined with a heap spray allows for a bypass of ASLR and DEP protections leading to potential memory corruption attacks. This vulnerability affects Firefox < 52, Firefox ESR < 45.8, Thunderbird < 52, and Thunderbird < 45.8.

EPSS 1.00% · 76.8th percentile

Risk Scores

EPSS Score
1.00%
76.8th percentile

Affected Products

VendorProductVersions
Ubuntu:16.04:LTSfirefox51.0.1+build2-0ubuntu0.16.04.2, 51.0.1+build2-0ubuntu0.16.04.1, 50.1.0+build2-0ubuntu0.16.04.1
Ubuntu:14.04:LTSfirefox37.0.1+build1-0ubuntu0.14.04.1, 37.0.2+build1-0ubuntu0.14.04.1, 38.0+build3-0ubuntu0.14.04.1
Ubuntu:14.04:LTSthunderbird1:38.3.0+build1-0ubuntu0.14.04.1, 1:38.4.0+build3-0ubuntu0.14.04.1, 1:38.5.1+build2-0ubuntu0.14.04.1
Ubuntu:16.04:LTSthunderbird0, 1:38.3.0+build1-0ubuntu2, 1:38.5.1+build2-0ubuntu1

Timeline

References

Open in Interactive Console →